Crypto tech provider Haruko hit by cyberattack affecting 15 clients, some funds lost

Crypto tech provider Haruko hit by cyberattack affecting 15 clients, some funds lost

Özet: Kripto piyasasında önemli gelişmeler yaşanıyor.

Some of Haruko’s smaller hedge-fund clients may have lost assets after the provider of crypto technology to institutions was targeted in a cyberattack earlier this week that affected 15 customers, according to three people with knowledge of the matter.

The breach exposed clients’ read-only exchange application programming interface (API) details and trading data, according to messages reviewed by CoinDesk and people familiar with the incident.

APIs allow clients’ and Haruko’s computers to communicate and exchange information.

The affected parties were all of Haruko’s non-whitelisted clients, according to messages from the company’s co-founder and chief technology officer, Adam Carlile, to a client and seen by CoinDesk.

A whitelist allows communication only with approved computers or websites.

Haruko did not respond to repeated requests for comment.

The breach was possible because Haruko uses bare-metal servers, or physical computers used exclusively by itself, rather than cloud services such as Amazon Web Services, which offer additional security controls, according to one of the people.

Haruko does not disclose its full customer roster, though its website names Bitcoin Suisse, GSR, Flowdesk, 3iQ Digital Assets, M2, Ampersan, MNNC Group (now operating as Monarq Asset Management) and Trovio Asset Management as clients.

The London-based firm provides portfolio, risk-management and trade-data infrastructure to institutional digital-asset firms.

Its platform connects with centralized exchanges, custodians, blockchains and decentralized-finance (DeFi) protocols, giving clients a consolidated view of their positions, transactions and risk exposure.

Analiz: Piyasa hareketliliği devam ediyor.