Threat Intelligence Brief
Curated summary with source attribution
Source: coindesk.com
Threat Risk: Medium
Victim: Haruko and institutional crypto clients
Incident: A targeted cyberattack on a crypto tech provider resulting in data exposure and fund theft.
Impact: Theft of client funds and exposure of read-only exchange API details and trading data.
Attacker: Unidentified threat actors
Analysis: Attackers exploited vulnerabilities associated with Haruko’s use of bare-metal servers and a lack of IP whitelisting for specific customers. While the exposed API keys were designated as read-only, insufficient security controls at the client level enabled the theft of assets. This incident underscores the systemic risk posed by third-party infrastructure providers in the digital asset ecosystem.
Recommendations: Implement strict IP whitelisting for all exchange API connections to prevent unauthorized access.; Regularly rotate server-side secrets and API keys to limit the window of potential exploitation.; Conduct rigorous security posture assessments of third-party technology providers.
Source: CoinDesk
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source