Incident Overview: $36 Million Attack and Founder's First Response
According to The Block, Humanity Protocol founder Terence Kwok has publicly commented for the first time after the project suffered an exploit of approximately $36 million. The attack severely disrupted operations and dented community confidence. Kwok emphasized that the attack originated from a compromised developer device, not a vulnerability in the smart contract itself. This indicates the underlying blockchain code remains secure, but operational security protocols failed.
Root Cause and Fund Recovery Outlook
Kwok explained that the attacker gained critical access by infiltrating a developer's device, then siphoned funds. He admitted that the likelihood of recovering the stolen assets is low, as the attacker rapidly moved funds through multiple mixing services. This mirrors the typical outcome of many DeFi and cross-chain bridge exploits, where recovery is only possible through early-stage chain tracking and law enforcement intervention.
Strategic Pivot: From Decentralized Identity to Enterprise AI
In response to the crisis, the team decided to redefine the project's direction. The original plan to build a blockchain and decentralized identity (DID) platform will be significantly scaled back, with a new focus on enterprise-grade AI products and services. This pivot means Humanity Protocol will no longer operate as a standalone public chain or DID solution; instead, it will leverage its existing technology (such as identity verification, privacy computing) to provide infrastructure support for AI applications. Kwok believes the enterprise AI market offers faster growth and clearer monetization paths, and the team already has relevant expertise.
Next Steps: Token Migration, Claims, and Business Reconstruction
The immediate priorities include token migration, a user claims and compensation process, and subsequent business reconstruction. A detailed compensation plan is being drafted, expected to utilize remaining treasury assets and future revenue from the new AI business to gradually reimburse victims. Token migration suggests the old token may be deprecated, and a new token will be tied to the revised project. These actions require community voting and legal compliance.
Industry Impact and Analysis
The Humanity Protocol case serves as a stark warning for the DePIN (Decentralized Physical Infrastructure Network) and DID sectors: even with audited smart contracts, developer endpoint security remains a critical vulnerability. The strategic pivot also reflects a trend where, amid tightening funding and intensifying competition, survival often takes precedence over the original vision. Other projects should strengthen internal security procedures and pre-establish crisis management playbooks.