A recent cyberattack on Haruko, a technology provider for the cryptocurrency sector, has impacted 15 clients, resulting in potential fund losses. The breach has revealed sensitive information, including read-only exchange API details and trading data. The incident primarily affected smaller hedge funds that lacked robust security measures, as reported by insiders familiar with the situation. The attack exploited vulnerabilities in Haruko's infrastructure, particularly its reliance on bare-metal servers instead of more secure cloud services. Adam Carlile, Haruko's co-founder and CTO, confirmed that the targeted attack was specifically aimed at Haruko itself, rather than its clients directly. Despite the breach, Haruko maintains that clients' login credentials were not compromised. However, it is reported that a limited amount of funds was stolen, especially from those clients not on Haruko's whitelist, which restricts access to authorized systems. In response to the incident, Haruko has rectified the security flaw and renewed its server-side credentials. The company is also advising clients to implement additional security measures, including an inbound IP whitelist, to enhance protection. Furthermore, Haruko plans to release a detailed technical analysis of the incident to provide clarity on the breach. The attack comes at a time when the cryptocurrency industry is grappling with increasing cyber threats, with over 200 recorded attacks in the first half of 2026 alone, leading to significant financial losses. Haruko serves over 80 clients globally, connecting them with various trading venues and blockchain protocols, underscoring the importance of security in the rapidly evolving digital asset landscape.