Certik has returned the funds to Kraken exchange, putting a happy end to the bug bounty-related saga.