Kraken is the only Major US Exchange never to be Hacked, and it was founded in 2011.

While Coinbase has never been hacked for it's coins, it has experienced breaches affecting thousands of users, and had its employee information breached In fishing campaign.

Kraken has had none of that.

Besides the obvious 2-Factor Authentication, and the fact they keep most customer funds on cold storage, you can thank their regular rigorous testing for vulnerabilities. They also have a great insurance plan protecting customer funds just in case.

Kraken engages independent third-party security auditors to conduct regular penetration testing and vulnerability assessments of their platform. These audits are conducted by reputable cybersecurity firms, such as HackersOne, CipherBlade, and others.

Penetration testing is a type of security testing that involves simulating an attack on a computer system to identify vulnerabilities that could be exploited by attackers. The goal of a penetration test is to identify weaknesses in a system before they can be exploited by malicious actors.

During a penetration test, the security auditors will attempt to exploit vulnerabilities in Kraken's platform and report their findings to Kraken's security team. Kraken's security team will then use these reports to address any issues found and improve the overall security posture of the platform.

In addition to penetration testing, Kraken also conducts regular vulnerability assessments to identify and address any potential security weaknesses in their system. These assessments involve automated scans and manual reviews of the platform's code to identify any vulnerabilities that could be exploited by attackers.

By engaging independent third-party security auditors to conduct regular penetration testing and vulnerability assessments, Kraken can ensure that their platform is secure and that they are taking a proactive approach to identify and address any potential security issues. This helps to build trust with their users and demonstrates their commitment to security.

I also might add, this is the only exchange I left one of my main holdings on for more than a month, and I will be happy to send some of my moon over there when, and if they ever list them.

Edit: Also the first exchange to implement proof of reserves in 2017 - u/Nusk0