Kraken’s $3 million bug exploit leads to criminal investigation