The white-hat hackers found a bug that allowed users to artificially inflate their balance on Kraken.