Humanity Protocol lost over $36 million after attackers compromised a foundation member's private keys via an employee's laptop. The hack, which involved draining and minting new tokens, caused the project's H token to crash over 80%. The incident is part of a larger 2026 trend of DeFi exploits targeting private keys, with founder Terence Kwok's team now working with authorities on recovery.
Humanity Protocol private key compromise
- ▪Approximately 17 wallets holding Humanity Protocol's native H token were drained during the exploit
- ▪The security breach involved the compromise of private keys belonging to a member of the Humanity Foundation
- ▪Attackers stole over $32 million from Humanity Protocol in a hack on June 8-9, 2026, with some reports placing the loss at over $36 million
- ▪The coordinated attack targeted wallets on both the Ethereum and BNB Chain blockchains
Employee laptop breach mechanics
- ▪The attack was traced to a compromised laptop belonging to a Humanity Protocol employee
- ▪The attacker also minted 100 million new H tokens and began selling them for Ethereum and BNB
- ▪Of the stolen funds, $23.7 million was swapped for Ethereum, while around $7.9 million remained in H tokens shortly after the hack
- ▪Attackers gained control by compromising three of six Gnosis Safe keys on Ethereum and three of five on BNB Chain
- ▪After gaining control, the attacker drained approximately 141.2 million H tokens from the protocol
H token price crash
- ▪The H token's price fell from a high of around $0.73 to a low of approximately $0.05-$0.08
- ▪Following the hack, Humanity Protocol's native H token crashed by 80-89% in 24 hours
DeFi security failures in 2026
- ▪According to DeFiLlama data, over $885 million was lost to DeFi hacks in the first six months of 2026
- ▪Other major 2026 key-theft incidents include the losses of $285 million from Solana exchange Drift and $292 million from Kelp DAO
- ▪The incident is part of a 2026 trend in which major crypto losses have resulted from stolen private keys rather than smart contract flaws
Recovery efforts underway
- ▪Humanity Protocol founder Terence Kwok confirmed the breach and advised users to avoid the project's bridge and liquidity pools
- ▪On-chain analyst Specter was the first to publicly flag the ongoing exploit targeting Humanity Protocol wallets
Operational security failure analysis
- ▪Humanity Protocol is a decentralized identity project using palm-scan biometrics and zero-knowledge proofs, positioning itself as a rival to Worldcoin
- ▪Founder Terence Kwok's previous venture, Tink Labs, shut down in 2019 after raising $160 million and reaching unicorn status
- ▪Security expert Meir Dolev characterized the hack as an "operational security failure" rather than a smart-contract bug
- ▪The project is scheduled to unlock 266.5 million H tokens, worth about $33 million at pre-crash prices, on June 25, 2026
Story comments
Loading comments…