Humanity Protocol
Security incident.

What the evidence shows.

The published investigation describes a targeted phishing and malware infection on a workstation, followed by theft of on-chain signing keys. The attackers manipulated privileged bridge and token-administration controls, transferred approximately 141.18 million $H on Ethereum, minted additional $H on BNB Smart Chain, and sold tokens through decentralized exchanges. The public account points to an endpoint and key-custody compromise, not a newly discovered flaw in token-contract business logic.

What the number means.

The approximately USD 36M figure is a contemporaneous press-reported estimate, not a final audited net loss. The June 11 official investigation summary separately identified more than USD 21M in ETH proceeds in known attacker addresses while BNB proceeds were still being traced. Those measures are not additive. Token price declines also describe market impact, not an additional cash theft amount.

How to test resilience.

Targeted phishing resilience; endpoint monitoring and remote-access controls; isolation of administrative signing keys; truly independent multisig quorum and recovery procedures; privileged contract-upgrade approvals; monitoring of unusual transfers and token issuance.