Access token theft

Missing IP whitelisting linked to which Haruko customers had data exposed

Haruko says the exchange credentials exposed in a token theft were read-only and that it holds no client assets. People familiar with the matter say a small amount of client money was taken anyway, and no figure has been published.