Kraken has definitely improved lately, love it.

I find their support worse then before. it takes more time to answer tickets on basic questions. Withdrawals f.e..
Today I got a mail though that their credited the stellar giveaway automatically which makes me happy..

Actaully you can't add something that already exists. Ethereum classic is ethereum. Ethereum forked is the new version that must be added. This trading pair should be represented ETH/ETF. To avoid any confusion with Exchange-Traded Fund (ETF abbr) four letter representation would be better - ETHC/ETHF.

I wonder, whether I am the only one who considers it disturbing that Kraken's two-factor authentication, e.g. for withdrawing funds, can easily be by-passed by simply changing the authentication method. For example, despite having Yubikey enabled for withdrawing funds, it is possible to withdraw funds without possessing the Yubikey (and without knowing the Master key) as follows:
   1. Go to Security/Two-Factor Authentication
   2. Click on the "Edit/View details" link for Funding
   3. Change Method to Password
   4. Set a new password (no Yubikey and no master key is required!)
   5. Go to Funding/Withdraw
   6. Add a new address and withdraw funds to it using the newly set password
So, anyone who is able to log in to a Kraken account or catches a browser with an open Kraken session is able to deplete this account.
I reported this vulnerability to Kraken more than two weeks ago. According to Kraken, this behaviour is intended and can be suppressed by going to Settings/Account and enabling "Global Settings Lock". However, I wonder who is aware of the fact that, without this "Global Settings Lock", the two-factor authentication is completely ineffective.

Today i had an interesting thing to happen.

Had a position to sell at 545€ XBTEUR done at 9:xx AM
At 15PM a huge spike up to 590€ appears and my trade doesn't execute....really awesome...not.

Care to explain why anyone?

To my knowledge nobody has reported having funds stolen with login 2fa enabled. However, some did have funds stolen with 2fa enabled only for funding. With 2fa for funding, it doesn't increase security unless you also enable the settings lock. This point has confused people and we are currently looking at changing it to eliminate this confusion.