Haruko hack affects 15 crypto clients as funds may be lost

Haruko's cyberattack affected 15 crypto clients. Some smaller hedge-fund clients may have lost assets. The breach exposed clients' read-only exchange API details and trading data. All affected clients were Haruko's non-whitelisted clients, according to messages from co-founder and chief technology officer Adam Carlile. Haruko said it fixed the vulnerability and refreshed its server-side secrets. One person familiar with the incident said the breach was possible because Haruko uses bare-metal servers instead of cloud services such as Amazon Web Services. Haruko did not respond to repeated requests for comment. Haruko's website names Bitcoin Suisse, GSR, Flowdesk, 3iQ Digital Assets, M2, Ampersan, MNNC Group, now operating as Monarq Asset Management, and Trovio Asset Management as clients.