Humanity Protocol Suffers $36M Loss After Key Compromise, Token Plummets 73%

Overview

• The H token of Humanity Protocol plunged dramatically after a security breach led to the theft of over $36 million.
• Hackers exploited compromised keys linked to an employee's laptop, draining 141.2 million H tokens and creating an additional 200 million H.
• The incident highlights ongoing vulnerabilities in the DeFi sector, which has seen significant losses in 2026.

Humanity Protocol's native cryptocurrency, H, suffered a steep decline of more than 80% following a significant security breach that allowed hackers to siphon off $36 million from its ecosystem. The breach, which occurred on June 8, was attributed to compromised private keys from an employee's laptop, facilitating unauthorized control over the token's bridge operations on Ethereum and BNB Chain.

The attack prompted a rapid drop in H's value, plummeting from $0.73132 to $0.079606 before stabilizing around $0.20, marking a 73% decline for the day. This dramatic downturn effectively erased gains from the previous week, when the token approached an all-time high of $0.80.

Our investigation into the security incident is ongoing, but we want to keep our community updated on developments.

— Humanity (@Humanityprot) June 9, 2026

According to the project team, the attackers compromised three out of six Gnosis Safe keys on Ethereum and three out of five on BSC. They manipulated contract functions to mint over 200 million new H tokens and drained existing tokens, leading to immediate suspension of bridge operations to mitigate further losses.

Terence Kwok, the founder of Humanity Protocol, advised users to avoid the platform’s infrastructure until security is assured. He affirmed that the team is collaborating with security experts and law enforcement to recover the stolen funds and address the breach comprehensively.

Security Concerns in DeFi

Meir Dolev, co-founder of Cyvers, a blockchain security firm, characterized the incident as an "operational security failure" rather than a flaw in the smart contract. He noted that the attacker exploited the situation due to inadequate security measures surrounding the private keys. Dolev emphasized that the nature of the required access made it clear that the breach was a fundamental structural issue within the protocol's security setup.

Despite the severity of the breach, the attacker faces difficulties liquidating the stolen funds due to limited liquidity pools. The incident reflects a broader trend in 2026, where DeFi protocols have reportedly lost over $885 million to hacks in just the first half of the year. As the cryptocurrency landscape continues to evolve, the need for robust security measures remains critical to protecting user investments and maintaining trust in decentralized platforms.