Humanity Protocol is facing a major security crisis after onchain investigators linked more than $31 million in losses to the project. The market reaction was immediate. Its native H token fell from $0.708 to $0.135, a drop of more than 81%, while daily trading volume climbed to $532 million, up 132%.
More than 17 linked wallets were drained
Onchain analyst Specter first flagged the incident, reporting that over 17 wallets tied to the protocol had been emptied, with early losses already above $19 million. Later tracking from Onchain Lens pushed the figure past $31 million and said the attacker did not keep H tokens on hand. The funds were swapped directly into ETH and traced to six known addresses.
Security firm CertiK backed that account. According to CertiK Alert, H tokens were sold across those six addresses for about 16,320 ETH, valued at roughly $27 million at the time.
Multisig compromise and 100 million extra tokens on BSC
CertiK said the incident went beyond simple wallet draining. The firm reported that ownership of the token admin contract had been transferred through a multisig, and all three signer addresses on that multisig were likely compromised. After that, an attacker allegedly upgraded a malicious token implementation and minted an additional 100 million H tokens on BSC before dumping them.
That sequence points to a layered attack, with control over administrative permissions and token issuance both coming into play.
Founder says foundation private keys were compromised
Founder Terence Kwok later confirmed that private keys belonging to a Humanity Foundation member had been compromised. He told users to avoid the bridge and any liquidity pools until the team issues a clear all-safe notice. He also said the team is working with security experts and exchange partners to contain the damage.
The official response, as described in the source material, includes five points: a foundation member’s private keys were compromised; the team is coordinating with security specialists and exchange partners; users should not interact with the bridge or liquidity pools for now; updates will come only from @Humanityprot or @terencekwok; and scammers pretending to help recover funds should be treated as a threat.
ZachXBT questions whether the case is fully understood
Not everyone accepts the breach narrative without reservation. Onchain investigator ZachXBT said it is still unclear whether the event was a straightforward theft or something connected to a market maker. He pointed to the concentration of H token supply as a detail that could matter in interpreting the wallet movements.
As of the time described in the source, no public evidence had emerged to settle that dispute.
No recovery or compensation plan announced yet
As of June 9, 2026, no recovered funds had been publicly reported. Humanity Protocol also had not announced any compensation plan or reversal of the newly minted tokens. The project’s stated position was that the core protocol infrastructure remained secure and that the damage was limited to foundation-level keys.
A detailed post-mortem is expected in the coming days. For H token holders and users with funds exposed to the platform, official channels remain the only confirmed source of updates while the investigation continues.