Skip to main content
AVOID.NET

Haruko

avoid.net/haruko→62/100·72% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 42 → 62. Problems weighed by who is responsible: incidents the subject suffered −12, concerns that are not fraud −6, problems around the subject, caused by others −2.5; legitimacy credit long-running +10, regulated +5; a recent unresolved incident −7.9. Version history →

Why this score
Every page starts at65
Concerns that are not fraud-6
Incidents it suffered (e.g. hacks)-12
Problems around it, caused by others-2.5
Long-running+10
Regulated+5
Recent unresolved incident-7.9
Sum52

Score: 62/100 (kept between 0 and 100)

How scoring works →
anchored·kZFBFq…1ReL
last updated 2026-10-10

Summary

Haruko is a London-based institutional digital asset infrastructure provider founded in 2021, serving over 80 clients globally across 100+ centralized venues, 30 blockchains, and 250 on-chain protocols. In September 2026, the company confirmed a targeted cyberattack affecting 15 institutional clients, in which attackers exploited a server-side process vulnerability to extract access tokens and gain read-only API access to client data; a small but confirmed amount of client funds was stolen. Haruko stated it patched the vulnerability, rotated server-side secrets, and committed to publishing a technical post-mortem.

Connected Entities

3 entities · 60 linked investigations
Organizations
□Amazon Web Services65□Haruko
Tokens
♦Bitcoin97
Relationships
  • Haruko→mentioned with→Bitcoin(60%)
  • Haruko→mentioned with→Amazon Web Services(75%)
Also appears in
Avalanche·52Helius·67Moonwell Lending·28Fake MetaMask Update Phishing Campaign (May 2026)·0Blockchain Bandit·0Swiss Bitcoin Pay·64TurtleDex·2Lendf.me·30SafePal·70Bitcoin Xchange (Syria-based, ISIS-Linked)·0

Connected Through

2 shared actors · 488 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Haruko?
0
Accepted
1
Under review
0
Rejected / revoked

1 submission awaiting moderator review.

Timeline(3 events)

1 March 2021

Haruko founded in London as a digital asset portfolio management and infrastructure platform.

Crypto Briefing

15 July 2024

Haruko announces $6 million Series A funding round co-led by White Star Capital and MMC Ventures, bringing total funding to approximately $16 million, and announces expansion into Southeast Asia with a Singapore office.

Tech.eu

18 September 2026

Haruko publicly confirms a targeted cyberattack affecting 15 institutional clients. Attackers exploited a server-side process vulnerability to extract access tokens, gaining read-only API access to client exchange credentials and trading data. A small but confirmed amount of client funds was stolen. Co-founder and CTO Adam Carlile states the vulnerability has been patched and server-side secrets rotated. A technical post-mortem is announced as forthcoming.

CoinDesk
Provenance & Audit Trail
Recorded on Solana ✓Verify on-chain11 Wayback Archives

Decision Log

  • #2rescore+20Recorded on Solana ✓10/10/2026, 6:47:53 PM
    slot 455367852 · hash ANTTXmwt6frsbkQ2oyG9kTiRNkBcmG7J2cqFdYHfwUyS
  • #1publishRecorded on Solana ✓9/18/2026, 11:03:03 PM
    slot 448226197 · hash HcB4a9qTgL8j8cdrzLhgUZPaXQiPdcjwq6xMg2SqmuxQ

This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 11 of 11 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 9/18/2026, 11:02:53 PM

last updated: 10/10/2026, 6:47:53 PM

2 views

avoid.net — verified advice for a post-truth world