Kraken Wrapped Bitcoin (kBTC)

Approved for: KBTC on Ethereum. The limits are in the memo below.

This review finds kBTC favorable with conditions and the strongest-governed CEX-issued wrapped bitcoin it has assessed. Kraken Financial, a Wyoming-chartered Special Purpose Depository Institution, holds kBTC in custody. This is a regulated state bank charter built specifically for digital-asset custody, not an ordinary exchange hot wallet or an offshore joint venture. The contract carries an independent Trail of Bits audit alongside Kraken’s internal review. Kraken also moved kBTC’s cross-chain infrastructure from LayerZero to CCIP in May 2026, before any kBTC-specific incident, and explicitly cited the April 2026 Kelp DAO/LayerZero exploit that led this registry to reject LayerZero separately. Redemption still requires a Kraken account, so this remains single-issuer, KYC-gated exposure. That is a client-specific constraint, and kBTC is not equivalent to sovereign BTC.

Review triggers: events that reopen the verdict
• Any confirmed depeg, unbacked mint, or reserve shortfall for kBTC specifically
• Kraken Financial’s Special Purpose Depository Institution charter is suspended, revoked, or materially restricted by Wyoming regulators
• A freeze or blacklist function is found in the deployed contract without prior disclosure
• A confirmed security incident specifically compromises kBTC minting, redemption, or the SPDI custody wallets, as distinct from general Kraken-exchange incidents unrelated to kBTC backing

Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-17.

The research file

Mechanism

A Kraken account holder mints kBTC 1:1 by withdrawing BTC and selecting a destination network: Ethereum, OP Mainnet, Ink, or Unichain at this review, with more planned. Redemption reverses the process. Depositing kBTC into a Kraken account on the matching network converts it back to BTC automatically. The token contract address is the same across all four supported chains.

Control and governance

Kraken Financial, a Wyoming Special Purpose Depository Institution, holds the assets in custody. Its state bank charter was created specifically for regulated digital-asset custody. Kraken holds reserves in segregated wallets and publishes a verification address that a client can check directly, instead of relying solely on the issuer’s own reports. Kraken’s internal security team reviewed the smart contract, and Trail of Bits audited it independently. Kraken’s own documentation disclosed no freeze or blacklist function. This review did not independently check that claim against the deployed bytecode. In May 2026, Kraken announced that kBTC and all future wrapped assets would move exclusively from LayerZero to Chainlink CCIP, explicitly in response to the April 2026 Kelp DAO exploit. Kraken made this change before any exploit of the product itself, not as cleanup after a loss.

Incident record

This review identified no kBTC-specific depeg, custody failure, or contract exploit. Kraken the exchange has a broader regulatory and security record worth weighing when assessing trust in the custodian, though none of it involved a kBTC custody or minting failure: a $30M SEC staking-program settlement in February 2023; an SEC unregistered-exchange suit dismissed with prejudice and no penalty in March 2025; a June 2024 white-hat-disclosed withdrawal-logic bug worth about $3M, with no customer funds affected; an April 2026 extortion attempt over limited internal data access affecting about 2,000 accounts, with no funds lost and Kraken refusing to pay; and an $8M fine from an Australian federal court in December 2024 against Kraken’s local operator. None of these events directly affected kBTC’s backing or minting process.

Exit

Redemption requires a Kraken account and remains subject to Kraken’s geographic and KYC restrictions. This is the same account-gated redemption pattern as Binance-Peg BTCB, which this registry already rejected, and the one area where kBTC falls short despite its stronger custody and audit record. A client without an eligible Kraken account has no path to redeem at par and must rely on secondary-market liquidity.

Comparison

kBTC is materially stronger than BTCB, an upgradeable proxy under one entity’s control with no disclosed regulated custody charter, and JustCryptos, with undisclosed architecture, Poloniex hot-wallet custody, and a confirmed $100M-plus breach. This registry rejected both. A chartered, regulated depository institution, an independent audit, and a proactive move to the stronger of the two cross-chain messaging layers this registry has assessed make kBTC different in kind, not merely degree. This registry also rejected WBTC after its completed move to custody concentrated in a Justin Sun-linked entity. kBTC’s single custodian is a US-regulated bank rather than an offshore joint venture, though dependence on one entity remains real in either case.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Kraken — kBTC product page · primary · accessed 2026-08-17
  Supports: mechanism, supported chains
• Kraken Support — what is kBTC · primary · accessed 2026-08-17
  Supports: redemption process
• Kraken Blog — introducing Kraken Wrapped Bitcoin · primary · accessed 2026-08-17
  Supports: launch announcement, custody structure
• CoinDesk — Kraken launches wrapped bitcoin token kBTC · secondary · accessed 2026-08-17
  Supports: launch context
• CoinDesk — Kraken to replace LayerZero with Chainlink for kBTC and future wrapped assets · secondary · accessed 2026-08-17
  Supports: CCIP migration, proactive timing
• SEC.gov — Kraken to discontinue unregistered staking-as-a-service, pay $30M · primary · accessed 2026-08-17
  Supports: 2023 settlement

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.