Kraken Parent Payward Joins Anthropic’s Project Glasswing to Automate Vulnerability Hunting

A crypto exchange’s security posture often comes down to a simple asymmetry: defenders need to find every meaningful flaw, while an attacker only needs one viable path. Payward, the parent company of Kraken, is adding a different kind of defender to that effort by joining Anthropic’s Project Glasswing, according to the original report. The company intends to use Anthropic’s cybersecurity model to hunt for vulnerabilities and share open-source findings.

That is a meaningful shift in how exchange operators approach the top of the security stack. Traditional reviews still depend on human red teams, third-party auditors, and bug bounty submissions. Each has natural limits: auditors are periodic, red teams are scheduled, and bounty programs depend on outside researchers deciding the target is worth their time. A cybersecurity model can probe code, dependencies, and configuration surfaces continuously, which changes the economics of finding issues before they are exploited.

For Kraken, the stakes are not abstract. The exchange operates custody infrastructure, trading systems, and a retail front end, all of which represent distinct attack surfaces. Engineering attention remains concentrated in a relatively small number of ecosystems, as shown by recent developer activity data. That concentration makes automated security coverage more useful for a major operator that cannot staff every review manually.