Haruko hack hits 15 crypto clients, with exchange API details, trading data and funds stolen - CoinDesk

A reported security breach at Haruko, a digital-asset portfolio and risk management platform, has affected 15 crypto clients, with exchange API credentials, trading data and funds said to have been stolen, according to CoinDesk. The incident is notable because it targets the software layer that sits between trading firms and their exchange accounts, rather than an exchange or blockchain itself.

That distinction matters. API keys are the connective tissue of crypto trading: they let funds, market makers and treasury teams read balances, place orders and move assets programmatically. If such credentials are compromised, the risk can extend beyond data exposure to unauthorized transactions, which is why affected firms often rotate keys and review permissions quickly.

For the wider market, the episode highlights operational and counterparty risk in crypto infrastructure, not just price risk. What to watch: confirmation of the scope from Haruko and affected clients, whether stolen funds can be traced or frozen, and any regulatory response. Until details are verified, the practical takeaway is that custody and connectivity arrangements deserve the same scrutiny as trading strategy.