Crypto technology provider Haruko was targeted in a cyberattack earlier this week, with 15 clients affected, according to CoinDesk. The incident exposed clients’ read-only exchange API details and trading data. A person familiar with the matter said some hedge fund clients with weaker security protections may have suffered small fund losses. Haruko co-founder and CTO Adam Carlile told clients in an email that the attack was carried out by an organized group and affected only non-whitelisted clients. He said the attackers exploited a flaw in one of Haruko’s processes to extract user access tokens, then accessed read-only exchange API information stored in process memory. Client login credentials were not compromised. The London-based company said it has fixed the vulnerability, rotated server-side keys, and plans to release a full technical post-mortem. Haruko provides portfolio, risk management, and trading data infrastructure for institutional digital asset firms and says it serves more than 80 clients globally.
Crypto technology provider Haruko was targeted in a cyberattack earlier this week, affecting 15 clients, according to CoinDesk.
The attack exposed clients’ read-only exchange API details and trading data. A person familiar with the matter said some hedge fund clients with weaker security protections may have lost small amounts of funds.
In an email to clients, Haruko co-founder and chief technology officer Adam Carlile said the incident was a targeted attack carried out by an organized group and that all affected clients were non-whitelisted clients. He said the attackers exploited a flaw in one of Haruko’s processes to extract user access tokens, then used them to obtain read-only exchange API information and other data stored in process memory. Client login credentials were not compromised.
Haruko said it has fixed the vulnerability and rotated server-side keys. The company also plans to publish a full technical post-mortem report.
London-based Haruko provides portfolio, risk management, and trading data infrastructure for institutional digital asset firms. Its platform connects centralized exchanges, custodians, blockchains, and DeFi protocols. The company says it currently serves more than 80 clients worldwide and is integrated with more than 100 centralized trading venues, 30 blockchains, and 250 on-chain protocols.
Clients listed on Haruko’s website include Bitcoin Suisse, GSR, Flowdesk, 3iQ Digital Assets, and M2. GSR said it was not affected by the incident.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
