A Kraken user appears to have lost roughly $18.2 million in cryptocurrency after a suspected social engineering attack, with stolen funds now moving across blockchains.