Haruko Faces Cyber Attack, 15 Clients Affected, Some Funds Stolen

Haruko, a cryptocurrency technology provider, suffered a cyber attack earlier this week, affecting 15 clients. The attack exposed clients' read-only exchange API details and trading data, with some hedge fund clients with weaker security potentially having small amounts of funds stolen. Adam Carlile, co-founder and CTO of Haruko, stated that the attack was initiated by an organization, and all affected clients were non-whitelisted. The attackers exploited a vulnerability in Haruko's processes to extract user access tokens and obtain read-only exchange API information stored in the process memory, while clients' login credentials were not compromised. Haruko has patched the vulnerability and refreshed server-side keys, planning to release a comprehensive technical review report. Headquartered in London, Haruko provides portfolio, risk management, and trading data infrastructure for institutional digital asset companies, serving over 80 clients globally, connecting to more than 100 centralized exchanges, 30 blockchains, and 250 on-chain protocols. Its listed clients include Bitcoin Suisse, GSR, Flowdesk, 3iQ Digital Assets, and M2, with GSR stating that it was not affected by this incident.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.