Haruko Crypto Infrastructure Company Attacked, Leaving Clients Affected

Crypto infrastructure company Haruko was targeted in an attack this week, leaving 15 institutional clients affected and some customer funds stolen.

The London-based company provides services to track crypto portfolios, transactions, and risks for its clients. However, attackers exploited a vulnerability in the company's own infrastructure to gain access to user data.

The accessed data included customers' read-only exchange API information and transaction records. While login credentials were not compromised, some small hedge funds may have lost assets, and a small amount of customer funds was stolen.

Haruko has since remediated the vulnerability and rotated secret keys on its server side, stating that an IP whitelist provides the highest level of protection.