haruko

🎯 Managed service provider hacked, 15 institutions implicated

📰 Haruko faced a targeted attack; 15 client exchanges' APIs and trading data were leaked. A few small funds reportedly lost money directly. GSR denies being involved

💬 For performance, they use bare-metal servers; the security boundary is left exposed. When something goes wrong, the entire institutional chain has to run alongside. No matter how loud they shout about compliance, if the supply chain leaks, it's all for nothing—you still have to hold the private keys yourself

🏷️ #Haruko #安全事件 #机构 #API

The institution-side infrastructure has once again been targeted. London encryption technology provider Haruko was hit by a targeted attack affecting 15 customers. The attacker entered the process memory using stolen user access tokens, obtained read-only exchange API details and trading data, and some less-secure small hedge fund clients may have suffered limited financial losses. However, customer on-device login credentials were not directly taken. The company says it has patched the vulnerability, rotated the server keys, and is preparing a technical post-mortem. In the first half of the year, attacks like these against infrastructure/operations accounted for the bulk of stolen funds. Once “on-chain, irreversible” happens, it’s hard to make things right. #加密安全 #Haruko

Crypto tech provider Haruko has been hit by a cyberattack, impacting 15 clients and leading to some loss of funds. This incident highlights the vulnerability of even specialized crypto infrastructure providers.

#Haruko #CyberSecurity ‎