{ "version": 1, "event_id": "evt_aee9a31353deec6c", "url": "https://xiyu.news/events/evt_aee9a31353deec6c/", "json": "https://xiyu.news/api/events/evt_aee9a31353deec6c.json", "type": "security_incident", "status": "monitoring", "category": "crypto", "title": { "zh": "Haruko 遭网络攻击，15 家加密客户的 API 密钥与交易数据泄露", "en": "Haruko hack hits 15 crypto clients, with exchange API details, trading data and funds stolen - CoinDesk" }, "current_state": { "zh": "总部位于英国、为机构提供加密货币投资组合管理与交易捕获技术的 Haruko 本周遭到网络攻击，共有 15 家客户受影响，其只读交易平台 API 凭证和交易数据被泄露。此外还有少量客户资金被盗，据报道部分规模较小的对冲基金客户出现资产损失。\n\n这一事件表明，单一中间层软件供应商可能成为数十家机构交易台的系统性入口，因为被泄露的 API 凭证和交易数据会给受影响基金及其交易对手带来后续风险。它可能会促使机构加密交易领域加快对第三方供应商安全与凭证管理的审查，而该领域近期随着现货 ETF 和主经纪商业务的发展而迅速扩张。\n\n据 CoinDesk 报道，被泄露的交易平台 API 信息属于只读权限，通常只允许攻击者查看余额与交易历史，而无法发起转账或下单，但报道仍提到有少量客户资金被盗。Haruko 的平台与数百家交易场所建立了全托管的集成连接，因此这一层级的凭证泄露可能同时波及大量交易所账户。", "en": "A hack targeting crypto trading infrastructure provider Haruko compromised 15 clients, resulting in the theft of exchange API credentials, trading data, and funds." }, "first_seen_at": "2026-09-18T22:43:42.490228+00:00", "last_updated_at": "2026-09-18T22:43:42.490228+00:00", "last_material_change_at": "2026-09-18T22:43:42.490228+00:00", "confidence": 0.75, "updates_count": 1, "sources_count": 1, "entities": [ "api", "coindesk", "exchange-api", "funds-stolen", "hack", "haruko" ], "identifiers": [], "topics": [ "crypto-trading", "exchange-api", "funds-stolen", "hack" ], "updates": [ { "update_id": "upd_615b09a4186178c2", "event_id": "evt_aee9a31353deec6c", "occurred_at": "2026-09-18T18:41:57Z", "published_at": "2026-09-18T18:41:57Z", "first_seen_at": "2026-09-18T22:43:42.490228Z", "time_precision": "published", "update_type": "initial", "material_change": true, "title_zh": "Haruko 遭网络攻击，15 家加密客户的 API 密钥与交易数据泄露", "title_en": "Haruko hack hits 15 crypto clients, with exchange API details, trading data and funds stolen - CoinDesk", "what_changed_zh": "总部位于英国、为机构提供加密货币投资组合管理与交易捕获技术的 Haruko 本周遭到网络攻击，共有 15 家客户受影响，其只读交易平台 API 凭证和交易数据被泄露。此外还有少量客户资金被盗，据报道部分规模较小的对冲基金客户出现资产损失。\n\n这一事件表明，单一中间层软件供应商可能成为数十家机构交易台的系统性入口，因为被泄露的 API 凭证和交易数据会给受影响基金及其交易对手带来后续风险。它可能会促使机构加密交易领域加快对第三方供应商安全与凭证管理的审查，而该领域近期随着现货 ETF 和主经纪商业务的发展而迅速扩张。\n\n据 CoinDesk 报道，被泄露的交易平台 API 信息属于只读权限，通常只允许攻击者查看余额与交易历史，而无法发起转账或下单，但报道仍提到有少量客户资金被盗。Haruko 的平台与数百家交易场所建立了全托管的集成连接，因此这一层级的凭证泄露可能同时波及大量交易所账户。", "what_changed_en": "A hack targeting crypto trading infrastructure provider Haruko compromised 15 clients, resulting in the theft of exchange API credentials, trading data, and funds.", "current_state_zh": "总部位于英国、为机构提供加密货币投资组合管理与交易捕获技术的 Haruko 本周遭到网络攻击，共有 15 家客户受影响，其只读交易平台 API 凭证和交易数据被泄露。此外还有少量客户资金被盗，据报道部分规模较小的对冲基金客户出现资产损失。\n\n这一事件表明，单一中间层软件供应商可能成为数十家机构交易台的系统性入口，因为被泄露的 API 凭证和交易数据会给受影响基金及其交易对手带来后续风险。它可能会促使机构加密交易领域加快对第三方供应商安全与凭证管理的审查，而该领域近期随着现货 ETF 和主经纪商业务的发展而迅速扩张。\n\n据 CoinDesk 报道，被泄露的交易平台 API 信息属于只读权限，通常只允许攻击者查看余额与交易历史，而无法发起转账或下单，但报道仍提到有少量客户资金被盗。Haruko 的平台与数百家交易场所建立了全托管的集成连接，因此这一层级的凭证泄露可能同时波及大量交易所账户。", "current_state_en": "A hack targeting crypto trading infrastructure provider Haruko compromised 15 clients, resulting in the theft of exchange API credentials, trading data, and funds.", "detailed_summary_zh": "A hack targeting crypto trading infrastructure provider Haruko compromised 15 clients, resulting in the theft of exchange API credentials, trading data, and funds.", "detailed_summary_en": "A hack targeting crypto trading infrastructure provider Haruko compromised 15 clients, resulting in the theft of exchange API credentials, trading data, and funds.", "background_zh": "Haruko 成立于 2019 年，总部位于英国，为机构客户提供投资组合管理、交易捕获以及连接服务，处于基金自有系统与其所交易的众多加密货币交易所之间。交易所 API 密钥是允许软件代表用户读取账户数据或下单的凭证，因此成为高价值攻击目标：只读密钥会限制攻击者的操作范围，而具备交易权限的密钥则可能直接转移资金。由于基金很少手动连接交易所，这类供应商层级是加密市场基础设施中常见且往往被忽视的失效点。", "background_en": "Haruko was founded in 2019 and is headquartered in the United Kingdom, offering institutional clients portfolio management, trade capture and connectivity that sits between a fund's own systems and the many crypto exchanges it trades on. Exchange API keys are credentials that let software read account data or place trades on a user's behalf, which is why they are a high-value target: read-only keys limit what an attacker can do, while trading-enabled keys can move funds. Because funds rarely connect to exchanges manually, this kind of vendor layer is a common and often under-examined point of failure in crypto market infrastructure.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "其直接影响渠道是运营与交易对手风险，而非代币定价：受影响基金可能暂时失去交易接入能力，并需轮换交易所 API 凭证，被盗余额对这些客户而言属于小规模的局部损失。更广泛的冲击则通过市场对机构加密基础设施及第三方托管/工具供应商的情绪传导，可能影响交易对手在引入交易技术时对供应商风险的评估。", "market_impact_en": "The direct transmission channel is operational and counterparty risk rather than token pricing: affected funds may face temporary loss of trading access and must rotate exchange API credentials, and any stolen balances represent a small, localized drawdown for those clients. Broader fallout would run through sentiment toward institutional crypto infrastructure and third-party custody/tooling providers, which could weigh on how counterparties assess vendor risk when onboarding trading technology.", "importance_score": 8.0, "references": [ { "url": "https://www.coindesk.com/business/2026/09/18/crypto-tech-provider-haruko-hit-by-cyberattack-affecting-15-clients-some-funds-lost", "title": "Haruko hack hits 15 crypto clients, with exchange API details, trading data and funds stolen" }, { "url": "https://coinedition.com/crypto-live-news/haruko-breach-exposes-api-data-and-trading-records-of-15/", "title": "Haruko Breach Exposes API Data and Trading Records of 15 Crypto Clients" }, { "url": "https://www.haruko.io/platforms/trade-capture/", "title": "Trade Capture System - Institutional Crypto Trading - Haruko" } ], "confidence": 0.75, "story_ids": [ "google_news:article:9ab2e1934142e2ae" ], "sources": [ { "url": "https://news.google.com/rss/articles/CBMixwFBVV95cUxPTV9qaG5DbW9HU2Z1M0JtZXBkMjJTc29KZ0tsSUlTNUoxd216QzhGN3JVY3I1c245eGZ3REV3NDJheC1fRUsxQzF4RHRWOVdHbm95dTg4UTlKZnYzR1JLekN1dzJtakZxX19DZ2ZRa3F0X0Q2Y25zSjZnQ0M0SV9zdHRZMW1PTWxpU1dfZmdPUVVYU3NZZUpWamFtVkpHQXVudTBoVWlQSXBuVTRLWXF2V2hDRjRGUUd3Wmw4WUdvWllZanp6ZF9j?oc=5", "label": "CoinDesk", "source_type": "google_news", "official": false } ] } ] }