According to CoinDesk, London-based crypto institutional technology provider Haruko suffered a targeted cyberattack earlier this week, affecting 15 clients. The attackers exploited a vulnerability in Haruko’s infrastructure to extract user access tokens, gaining access to clients’ read-only exchange API credentials and transaction data. A small amount of client funds were stolen, with smaller hedge funds possessing weaker security controls facing higher risk. Adam Carlile, co-founder and CTO of Haruko, confirmed the attack was specifically aimed at Haruko; the vulnerability has since been patched, and the company plans to release a full technical post-mortem report. Haruko serves over 80 institutional clients globally and connects to more than 100 centralized exchanges and 30 blockchains.
Haruko, a London-based crypto tech provider, hit by targeted cyberattack affecting 15 clients
TechFlowShare
Summary
Haruko, a London-based crypto infrastructure provider, confirmed a targeted cyberattack impacting 15 institutional clients. Attackers exploited a vulnerability to extract access tokens, gaining read-only access to API and transaction data. A small amount of funds was stolen, with weaker security at smaller hedge funds increasing exposure. Co-founder Adam Carlile stated the attack was direct and the vulnerability has been patched. The firm will release a technical post-mortem. Haruko connects over 80 clients to more than 100 exchanges and 30 blockchains. The incident underscores ongoing risks in the crypto market and the need for deeper crypto analysis.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.