London-Based Haruko Hit by Cyberattack Exposing Client Data

Haruko, a digital asset technology platform based in London, has been hit by a cyberattack that exposed data belonging to 15 clients. Some funds were also lost in the incident.

The company, which connects centralized finance exchanges, on-chain protocols, and over-the-counter trading venues into a single dashboard, raised approximately $16 million in total funding, including a $6 million Series A round in July 2024 co-led by White Star Capital and MMC Ventures.

Haruko integrates with over 100 centralized trading venues and supports more than 30 blockchains and 250 on-chain protocols. Despite its robust security measures, including role-based permissions, multi-factor authentication, single sign-on integration, and IP whitelisting, the breach suggests that attackers may have gained access to API keys or trading credentials.

The incident highlights the risk of institutional trust in the crypto space and raises questions about the attack vector. The UK's Financial Conduct Authority has been expanding its digital asset regulatory perimeter, and a breach at a London-based provider with institutional clients will likely draw scrutiny.