Humanity Protocol Loses Over $32 Million in Private Key Compromise, Token Crashes 80-89%

Humanity Protocol lost over $36 million after attackers compromised a foundation member's private keys via an employee's laptop. The hack, which involved draining and minting new tokens, caused the project's H token to crash over 80%. The incident is part of a larger 2026 trend of DeFi exploits targeting private keys, with founder Terence Kwok's team now working with authorities on recovery.

Humanity Protocol private key compromise

• ▪Approximately 17 wallets holding Humanity Protocol's native H token were drained during the exploit.
• ▪The security breach involved the compromise of private keys belonging to a member of the Humanity Foundation.
• ▪Attackers stole over $32 million from Humanity Protocol in a hack on June 8-9, 2026, with some reports placing the loss at over $36 million.
• ▪The coordinated attack targeted wallets on both the Ethereum and BNB Chain blockchains.

Employee laptop breach mechanics

• ▪The attack was traced to a compromised laptop belonging to a Humanity Protocol employee.
• ▪The attacker also minted 100 million new H tokens and began selling them for Ethereum and BNB.
• ▪Of the stolen funds, $23.7 million was swapped for Ethereum, while around $7.9 million remained in H tokens shortly after the hack.
• ▪Attackers gained control by compromising three of six Gnosis Safe keys on Ethereum and three of five on BNB Chain.
• ▪After gaining control, the attacker drained approximately 141.2 million H tokens from the protocol.

H token price crash

• ▪The H token's price fell from a high of around $0.73 to a low of approximately $0.05-$0.08.
• ▪Following the hack, Humanity Protocol's native H token crashed by 80-89% in 24 hours.

DeFi security failures in 2026

• ▪According to DeFiLlama data, over $885 million was lost to DeFi hacks in the first six months of 2026.
• ▪Other major 2026 key-theft incidents include the losses of $285 million from Solana exchange Drift and $292 million from Kelp DAO.
• ▪The incident is part of a 2026 trend in which major crypto losses have resulted from stolen private keys rather than smart contract flaws.

Recovery efforts underway

• ▪Humanity Protocol founder Terence Kwok confirmed the breach and advised users to avoid the project's bridge and liquidity pools.
• ▪On-chain analyst Specter was the first to publicly flag the ongoing exploit targeting Humanity Protocol wallets.

Operational security failure analysis

• ▪Humanity Protocol is a decentralized identity project using palm-scan biometrics and zero-knowledge proofs, positioning itself as a rival to Worldcoin.
• ▪Founder Terence Kwok's previous venture, Tink Labs, shut down in 2019 after raising $160 million and reaching unicorn status.
• ▪Security expert Meir Dolev characterized the hack as an "operational security failure" rather than a smart-contract bug.
• ▪The project is scheduled to unlock 266.5 million H tokens, worth about $33 million at pre-crash prices, on June 25, 2026.

3 sources