London-based digital asset platform Haruko reported a cyberattack that resulted in the theft of funds and the exposure of data belonging to 15 clients. The company, which provides infrastructure for institutional crypto trading, confirmed the incident despite maintaining security measures like multi-factor authentication and IP whitelisting.
Founded in March 2021, Haruko has raised approximately $16 million in total funding. This includes a $6 million Series A round closed in July 2024, co-led by White Star Capital and MMC Ventures. The platform integrates with over 100 centralized exchanges and supports more than 30 blockchains and 250 on-chain protocols.
The breach suggests that attackers may have compromised API keys or trading credentials used to link client accounts across various venues. As Haruko is not a custodian, the loss of funds highlights risks associated with its role as a data and analytics aggregator. The incident is expected to draw scrutiny from the UK Financial Conduct Authority.
The 15 affected clients must now evaluate the extent of the data exposure and determine if their trading strategies were compromised. They are also required to rotate credentials across all connected trading venues to prevent further unauthorized access.
