[ANN] KRAKEN.COM - Exchange with USD EUR GBP JPY CAD BTC LTC XRP NMC XDG STR ETH

[SebastianJu]

Is there a way to move funds from one kraken account to another without having to use a cryptocurrency? Coupons or something like mtgox had? Or directly pushing to another account?

[Wolke]

hey kraken...

we got from your api this message:
{ "error": [ "EGeneral:Temporary lockout" ] }

why we are lockout ? can you please make me free?

thanks

cheers


Request #31811

Hi - if you are locked out of the API, just wait for 15 minutes. There's a rate limit for the API - see below for an explanation of how the limit works.

Our API rate limits works on a count system and depends on your verification tier.

For Tier 3 it works like this:

Max Count (before lockout): 15             (lockout is for 15 minutes)

Count Reduction Rate: 1 every 3 seconds
 
Count increment for order add/cancel calls: +0
 
Count increment for ledger/trade history calls: +2
 
Count increment for all other calls: +1
 
Example: Starting from a count of 0, suppose that you made the following calls during a 6 second window: 5 add/cancel calls, 6 ledger calls, and 4 "other" calls. Your count would then be 5*0 + 6*2 + 4*1 – 2 = 14 (since the count is below 15 you would not be locked out).

Tiers 1-2: Same as above except Max Count = 10 and Count Reduction Rate = 1 every 5 seconds.

Tier 4: Same as above except Max Count = 20 and Count Reduction Rate = 1 every 2 seconds.

hey....

is it possible to ask the server how many points are reached ?

[Dargo]

Ripple & Stellar Traders:

We have taken our Ripple and Stellar gateways offline pending further investigation of the "partial payments" vulnerability. We will bring the gateways back online as soon as possible, but not before we are absolutely certain that we aren't affected by this vulnerability.

https://medium.com/@abrkn/partial-payments-ripple-stellar-vulnerability-in-the-wild-29aaefd8a7ac

[Dargo]

Is there a way to move funds from one kraken account to another without having to use a cryptocurrency? Coupons or something like mtgox had? Or directly pushing to another account?

No, we don't have an option for that. Eventually we want to add support for sub-accounts and you'd probably be able to move funds back and forth easily between your main account and sub-account. We don't have an ETA for sub-accounts at the present time though.

[Dargo]

hey kraken...

we got from your api this message:
{ "error": [ "EGeneral:Temporary lockout" ] }

why we are lockout ? can you please make me free?

thanks

cheers


Request #31811

Hi - if you are locked out of the API, just wait for 15 minutes. There's a rate limit for the API - see below for an explanation of how the limit works.

Our API rate limits works on a count system and depends on your verification tier.

For Tier 3 it works like this:

Max Count (before lockout): 15             (lockout is for 15 minutes)

Count Reduction Rate: 1 every 3 seconds
 
Count increment for order add/cancel calls: +0
 
Count increment for ledger/trade history calls: +2
 
Count increment for all other calls: +1
 
Example: Starting from a count of 0, suppose that you made the following calls during a 6 second window: 5 add/cancel calls, 6 ledger calls, and 4 "other" calls. Your count would then be 5*0 + 6*2 + 4*1 – 2 = 14 (since the count is below 15 you would not be locked out).

Tiers 1-2: Same as above except Max Count = 10 and Count Reduction Rate = 1 every 5 seconds.

Tier 4: Same as above except Max Count = 20 and Count Reduction Rate = 1 every 2 seconds.

hey....

is it possible to ask the server how many points are reached ?

No, there isn't any query for that. I'll add it as a feature request for our developers to consider though.

[Sukrim]

Ripple & Stellar Traders:

We have taken our Ripple and Stellar gateways offline pending further investigation of the "partial payments" vulnerability. We will bring the gateways back online as soon as possible, but not before we are absolutely certain that we aren't affected by this vulnerability.

https://medium.com/@abrkn/partial-payments-ripple-stellar-vulnerability-in-the-wild-29aaefd8a7ac

Stellar has disabled this functionality alltogether already (forcing you to pay fees when reimbursing someone), on Ripple you hopefully already check flags before crediting accounts. Better safe than sorry though, this is only a "vulnerability" if you didn't read the documentation, otherwise it's a useful feature.

[Dargo]

Ripple & Stellar Traders:

We have taken our Ripple and Stellar gateways offline pending further investigation of the "partial payments" vulnerability. We will bring the gateways back online as soon as possible, but not before we are absolutely certain that we aren't affected by this vulnerability.

https://medium.com/@abrkn/partial-payments-ripple-stellar-vulnerability-in-the-wild-29aaefd8a7ac

Stellar has disabled this functionality alltogether already (forcing you to pay fees when reimbursing someone), on Ripple you hopefully already check flags before crediting accounts. Better safe than sorry though, this is only a "vulnerability" if you didn't read the documentation, otherwise it's a useful feature.

The documentation on the partial payment feature is very poor. Even the Stellar Development Foundation only learned of the issue this past week. Even though there was an update to the Stellar code base to remove the feature, we are nonetheless taking the Stellar gateway offline until we can fully evaluate everything ourselves. Overly cautious perhaps, but we'd rather be overly cautious in a situation like this. 

[bibbit]

We have taken our Ripple and Stellar gateways offline pending further investigation of the "partial payments" vulnerability. We will bring the gateways back online as soon as possible, but not before we are absolutely certain that we aren't affected by this vulnerability.

If Kraken finds that it properly implemented the code to receive payments, and was not vulnerable, I hope that you will say so. This is much preferable to bringing Ripple and Stellar back online and not saying whether Kraken was safe to begin with or was fixed during the review.

Both Coinex and RippleFox have stated that they had properly accounted for partial payments in their deposit code, and were not at risk (RippleFox said that they were actually attacked, but their deposit code correctly examined the amount received, so their gateway implementation credited the attackers account with the funds actually received).

[gewure]

12 requests a minute is pretty slow - can't you just allow at least 120/minute for everyone who makes use of the private API?
compared to other markets that would be still not very much..

thanks

[Serpens66]

A question about ripple and kraken:

You said something about your ripple "gateway".  But would'nt this mean I can deopsit for example € from another gateway to krakens gateway?  Where is this option to withdraw/deposit € via Ripple?

[Dargo]

A question about ripple and kraken:

You said something about your ripple "gateway".  But would'nt this mean I can deopsit for example € from another gateway to krakens gateway?  Where is this option to withdraw/deposit € via Ripple?

Sorry for the confusion, but that's not what I meant. The only transactions we support through the Ripple network are for XRP. So do not try to send us euros, bitcoins, or anything else through the Ripple network.

[Dargo]

Ripple & Stellar Traders:

We have taken our Ripple and Stellar gateways offline pending further investigation of the "partial payments" vulnerability. We will bring the gateways back online as soon as possible, but not before we are absolutely certain that we aren't affected by this vulnerability.

https://medium.com/@abrkn/partial-payments-ripple-stellar-vulnerability-in-the-wild-29aaefd8a7ac

Stellar payments are back online, but Ripple is still offline while we patch our code to ensure we aren't vulnerable. We were previously vulnerable but nobody exploited it and we probably would have caught it fairly quickly if they had. Ripple will be offline at least until tomorrow, but hopefully not much longer than that.

[Equality 7-2521]

Any plans to support the Counterparty Protocol?  Like it's native currency XCP and consequently, all of the assets listed on it???

http://counterparty.io/

[bibbit]

We were previously vulnerable but nobody exploited it and we probably would have caught it fairly quickly if they had.

Thanks for the transparency. Kraken always struck me as the sort of well run exchange that has good internal controls, like an appropriately small hot wallet and manual review of certain transaction profiles, so I'm sure that you would have caught any attempt fairly quickly.

During the discussion of the episode over on the Stellar forum, the bx.in.th exchange operator described one of their controls, which makes exceptionally good sense:

We also check every coin wallet balance before every withdrawal.  This means we have to run withdrawals in batches every 5 minutes.  Our system does an entire balance audit before every withdrawal batch.  We compare all users balances to the actual wallet balances, if any balance does not match then no withdrawals go out for any currency.

If Kraken isn't already doing something similar (and you very well may be), it might be worth implementing as an extra safeguard for all assets.

   

[Dargo]

Any plans to support the Counterparty Protocol?  Like it's native currency XCP and consequently, all of the assets listed on it???

http://counterparty.io/

No plans that I have heard of.

[Dargo]

We were previously vulnerable but nobody exploited it and we probably would have caught it fairly quickly if they had.

Thanks for the transparency. Kraken always struck me as the sort of well run exchange that has good internal controls, like an appropriately small hot wallet and manual review of certain transaction profiles, so I'm sure that you would have caught any attempt fairly quickly.

During the discussion of the episode over on the Stellar forum, the bx.in.th exchange operator described one of their controls, which makes exceptionally good sense:

We also check every coin wallet balance before every withdrawal.  This means we have to run withdrawals in batches every 5 minutes.  Our system does an entire balance audit before every withdrawal batch.  We compare all users balances to the actual wallet balances, if any balance does not match then no withdrawals go out for any currency.

If Kraken isn't already doing something similar (and you very well may be), it might be worth implementing as an extra safeguard for all assets.  

Thanks - I'll run this by our developers, though as you say we may be doing something similar (I'm not familiar with all our accounting checks).

[Kn_os]

Ripple & Stellar Traders:

We have taken our Ripple and Stellar gateways offline pending further investigation of the "partial payments" vulnerability. We will bring the gateways back online as soon as possible, but not before we are absolutely certain that we aren't affected by this vulnerability.

https://medium.com/@abrkn/partial-payments-ripple-stellar-vulnerability-in-the-wild-29aaefd8a7ac

Stellar payments are back online, but Ripple is still offline while we patch our code to ensure we aren't vulnerable. We were previously vulnerable but nobody exploited it and we probably would have caught it fairly quickly if they had. Ripple will be offline at least until tomorrow, but hopefully not much longer than that.

Any progress on put xrp gateway online..? You said untile today...

[Dargo]

Ripple & Stellar Traders:

We have taken our Ripple and Stellar gateways offline pending further investigation of the "partial payments" vulnerability. We will bring the gateways back online as soon as possible, but not before we are absolutely certain that we aren't affected by this vulnerability.

https://medium.com/@abrkn/partial-payments-ripple-stellar-vulnerability-in-the-wild-29aaefd8a7ac

Stellar payments are back online, but Ripple is still offline while we patch our code to ensure we aren't vulnerable. We were previously vulnerable but nobody exploited it and we probably would have caught it fairly quickly if they had. Ripple will be offline at least until tomorrow, but hopefully not much longer than that.

The Ripple gateway is patched and back online now too. If you had a pending XRP withdrawal, it should have been cancelled. But new XRP withdrawal requests should be working fine now. 

[Dargo]

A few clients are experiencing an issue with stuck bitcoin withdrawals. We are aware of this issue and working to resolve it as quickly as possible.

[nagleatorcoin]

Currently experiencing delayed Bitcoin deposits?