Haruko hack hits 15 crypto clients, with exchange API details, trading data and funds stolen - CoinDesk

A reported security breach at Haruko, a crypto asset management platform, has affected 15 clients, according to CoinDesk. The incident reportedly involved the theft of exchange API credentials, trading data, and funds. Because Haruko sits between institutional clients and their exchange accounts, compromised API keys can be especially consequential: such keys often carry permissions to view balances, place orders, or move assets, depending on how they were configured.

For markets, the immediate relevance is less about price direction than about operational trust. Institutional crypto participants rely on a chain of third-party tools, and a single weak link can expose positions and liquidity. Headlines of this kind can prompt firms to review who holds API access, what permissions those keys carry, and whether withdrawals are restricted by IP allowlists or separate approval steps.

What to watch: Haruko's official statements and any confirmation of scope, whether affected clients disclose losses, and how exchanges respond to revoked or rotated keys. Until verified details emerge, the episode is best read as a reminder of counterparty and custody risk in crypto market infrastructure rather than a signal about any specific asset.