Crypto tech provider Haruko hit by cyberattack, 15 clients affected

Crypto tech provider Haruko has been hit by a cyberattack that affected 15 clients, with some funds lost, according to sources cited by CoinDesk. The incident underscores the vulnerability of crypto infrastructure providers, especially for smaller hedge funds with weaker security controls that become easy targets.

Context: an industry under pressure

Haruko provides portfolio management and trading solutions for crypto investment funds, a niche that grew rapidly during the 2020-2021 boom. As more crypto hedge funds outsource their infrastructure, tech providers become single points of failure. This isn't the first incident: previous attacks on DeFi platforms and custodians have shown that perimeter security doesn't always live up to the promises.

Details: targeted attack and selective losses

The attack was targeted and affected 15 clients of Haruko, according to the sources. Some smaller hedge funds with weaker security controls reportedly suffered fund losses. The company has not disclosed the exact amount or the attack vector, but the incident occurred recently. Affected clients include smaller firms that likely lack dedicated cybersecurity teams.

Analysis: who wins and who loses?

Large players with in-house infrastructure and constant audits come out stronger, while small funds relying on third parties are left exposed. My take: this security gap is a structural problem in the crypto ecosystem, where the convenience of outsourcing clashes with fiduciary responsibility. Haruko must demonstrate transparency and strengthen its defenses, or it will lose credibility with institutional clients.

Implications: regulatory pressure and market shifts

Regulators are expected to scrutinize crypto tech providers, demanding stricter security standards and mandatory incident notifications. Small funds may face higher compliance costs or migrate to more robust platforms. Additionally, this episode could accelerate industry consolidation, favoring providers with better cybersecurity practices.

The open question is whether the crypto ecosystem will learn from this lesson before the next attack occurs.

Source: CoinDesk