Skip to main content
AVOID.NET
Sign in

Haruko

avoid.net/haruko→42/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·kZFBFq…1ReL

Summary

Haruko is a London-based institutional digital asset infrastructure provider founded in 2021, serving over 80 clients globally across 100+ centralized venues, 30 blockchains, and 250 on-chain protocols. In September 2026, the company confirmed a targeted cyberattack affecting 15 institutional clients, in which attackers exploited a server-side process vulnerability to extract access tokens and gain read-only API access to client data; a small but confirmed amount of client funds was stolen. Haruko stated it patched the vulnerability, rotated server-side secrets, and committed to publishing a technical post-mortem.

Connected Entities

3 entities · 60 linked investigations
Organizations
□Amazon Web Services65□Haruko
Tokens
♦Bitcoin62
Relationships
  • Haruko→mentioned with→Bitcoin(60%)
  • Haruko→mentioned with→Amazon Web Services(75%)
Also appears in
Bitcoin·62Lendf.me·30Shibarium·28Ruslan Igorevich Tkachuk·2SafePal·42Bitcoin Xchange (Syria-based, ISIS-Linked)·0Abdelhakim Boukich·0Coincheck·38Kevin Rose·57BitMEX (2026 Class Action — Insider Trading and Liquidation Fraud)·10+ 50 more

Connected Through

2 shared actors · 496 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Haruko?

Timeline(3 events)

1 March 2021

Haruko founded in London as a digital asset portfolio management and infrastructure platform.

Crypto Briefing

15 July 2024

Haruko announces $6 million Series A funding round co-led by White Star Capital and MMC Ventures, bringing total funding to approximately $16 million, and announces expansion into Southeast Asia with a Singapore office.

Tech.eu

18 September 2026

Haruko publicly confirms a targeted cyberattack affecting 15 institutional clients. Attackers exploited a server-side process vulnerability to extract access tokens, gaining read-only API access to client exchange credentials and trading data. A small but confirmed amount of client funds was stolen. Co-founder and CTO Adam Carlile states the vulnerability has been patched and server-side secrets rotated. A technical post-mortem is announced as forthcoming.

CoinDesk
Provenance & Audit Trail
Anchored on SolanaVerify on-chain11 Wayback Archives

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 11 of 11 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 9/18/2026, 11:02:53 PM

last updated: 9/19/2026, 1:01:13 AM

avoid.net — verified advice for a post-truth world