Can someone help trace where 1,202 sats went between a GoMining BTC withdrawal and a Kraken BTC deposit?

I'm hoping some of the Bitcoin experts here can help me understand what happened.

​

I recently made a BTC withdrawal from GoMining to my Kraken deposit address.

​

GoMining withdrawal screen showed:

​

Withdrawal Amount:

0.00343202 BTC

​

Fee:

0 BTC

​

You'll Receive:

0.00343202 BTC

​

Kraken later credited:

​

0.00342000 BTC

​

Difference:

​

0.00001202 BTC (1,202 sats)

​

Kraken manually reviewed the deposit and confirmed that transaction:

​

a86609911ead87031cf75a808a965802f3adaa9f07e4fd0b88d66ea72a159112

​

was the transaction that delivered funds to my Kraken deposit address and that the amount received was exactly:

​

0.00342000 BTC

​

Looking at the transaction on mempool.space:

​

Transaction:

a86609911ead87031cf75a808a965802f3adaa9f07e4fd0b88d66ea72a159112

​

Input:

​

bc1qr2hhvpf3m0z4sx90nxqydccxlxkf4pe5mjfhcr

​

0.00343202 BTC

​

Outputs:

​

0.00342000 BTC

to:

3KtixuucHp3ZFSex3847Liv6v8m1xnvt8y

​

0.00001060 BTC

to:

bc1qgcq078znysgm6fsveu894e32mrzqy9n9ncjg0w

​

Miner Fee:

​

0.00000142 BTC

(142 sats)

​

The math balances perfectly:

​

0.00342000 BTC

+ 0.00001060 BTC

+ 0.00000142 BTC

= 0.00343202 BTC

​

GoMining states that their withdrawal transaction is:

​

95333b087645e5fa1c2b64ea5e62f41ac3929a673aa7186697cf3a73916cd51d

​

and that transaction a86609911ead87031cf75a808a965802f3adaa9f07e4fd0b88d66ea72a159112 was not created by them.

​

Kraken states that they do not know who controls:

​

bc1qr2hhvpf3m0z4sx90nxqydccxlxkf4pe5mjfhcr

​

and that GoMining would need to explain how transaction:

​

95333b087645e5fa1c2b64ea5e62f41ac3929a673aa7186697cf3a73916cd51d

​

ultimately resulted in transaction:

​

a86609911ead87031cf75a808a965802f3adaa9f07e4fd0b88d66ea72a159112

​

being created.

​

My goal is not to accuse either company of anything.

​

I'm simply trying to understand:

​

1. Who likely controlled the input address:

   bc1qr2hhvpf3m0z4sx90nxqydccxlxkf4pe5mjfhcr

​

1. What the 1,060 sat output to:

   bc1qgcq078znysgm6fsveu894e32mrzqy9n9ncjg0w

​

most likely represents.

​

1. Whether this looks like a normal custody, batching, forwarding, exchange, or UTXO management process.

​

1. Whether anyone can determine the relationship between:

​

95333b087645e5fa1c2b64ea5e62f41ac3929a673aa7186697cf3a73916cd51d

​

and

​

a86609911ead87031cf75a808a965802f3adaa9f07e4fd0b88d66ea72a159112

​

from publicly available blockchain data.

​

Any help would be appreciated.