Haruko hack hits 15 crypto clients, with exchange API details, trading data and funds stolen - CoinDesk

A reported security breach at Haruko, a crypto asset management platform, has affected 15 clients, according to CoinDesk. The incident reportedly involved the theft of exchange API details, trading data, and funds — a combination that raises concerns beyond a single platform, since API keys can act as a bridge between a firm's systems and the exchanges it trades on.

For market participants, the key issue is operational rather than directional. When exchange API credentials are compromised, the risk is not limited to the affected firm's own balances; poorly scoped keys can potentially be used to place orders, move assets, or access account information. That makes permission settings, withdrawal whitelists, and key rotation practices central to how crypto businesses manage counterparty and infrastructure risk.

What to watch: confirmation from Haruko and the affected exchanges, the scope of any fund losses, and whether the breach prompts tighter API security standards across the industry. Incidents like this tend to sharpen institutional focus on custody and connectivity controls, though their immediate price impact is often limited unless losses prove systemic.