I think that is the risk that the research company is now facing!
They are trying to argue in X (Twitter) that the exchange did not give them credit. But that does not justify stealing millions!
I suspect reality will set in very quickly as they will not want to go to jail.
RE: Kraken Hacked by Cybersecurity Researchers