{"investigation":{"slug":"humanity-protocol","entity_name":"Humanity Protocol","trust_score":18,"severity_base":null,"score_modifier":0,"confidence":0.82,"status":"draft","content_type":"investigation","summary":"Humanity Protocol is a zero-knowledge Layer-2 blockchain project using palm-scan biometrics for decentralized identity verification, often described as a rival to Worldcoin. On June 8, 2026, an attacker compromised a director's laptop via a phishing email impersonating South Korean exchange Bithumb, stole private keys controlling bridge and proxy-admin contracts, drained approximately 141 million H tokens from Ethereum, and minted an additional 100-300 million H tokens on BNB Smart Chain, causing total losses estimated at $36 million and an 80-89% collapse in the H token price. Blockchain security firm Quantstamp attributed the attack to DPRK-linked threat actors based on malware signatures and Hancom certificate patterns; on-chain investigator ZachXBT initially alleged the incident may have been staged to benefit an active market maker, but later stated he could not confirm insider involvement.","sections":[{"content":"Humanity Protocol was publicly announced on February 20, 2024, developed by the Human Institute in collaboration with Animoca Brands and Polygon Labs. The project's core product allows users to scan their palms and generate a zero-knowledge proof of unique human identity, issuing a 'Human ID' on a Layer-2 blockchain. Founder Terence Kwok, a Hong Kong-based entrepreneur, previously founded Tink Labs in 2012, a hospitality smartphone startup that raised approximately $170 million from investors including SoftBank before entering insolvency proceedings in 2019 after burning through investor capital amid aggressive expansion and declining hotel demand. Protos reported that Tink Labs' European division began winding up in January 2020. In May 2024, Humanity Protocol raised $30 million at a $1 billion valuation led by Kingsway Capital. In January 2025, Pantera Capital and Jump Crypto led a further $20 million round at a fully diluted valuation of $1.1 billion. Despite the project's anti-bot premise, Kwok acknowledged in a leaked conversation reported by DL News in June 2025 that of approximately 9 million Human IDs created, only about 1 million were verifiably human, implying up to 88% were bots. The H token subsequently fell more than 61% from its launch price on that disclosure.","heading":"Project Background","sources":[{"url":"https://www.theblock.co/post/337538/pantera-capital-and-jump-crypto-lead-20-million-funding-round-for-humanity-protocol","name":"Pantera Capital and Jump Crypto lead $20 million funding round for Humanity Protocol — The Block","type":"news_article","credibility":2},{"url":"https://www.biometricupdate.com/202501/humanity-protocol-raises-20m-at-1-1b-valuation","name":"Humanity Protocol raises $20M at $1.1B valuation — Biometric Update","type":"news_article","credibility":2},{"url":"https://protos.com/how-humanity-protocol-ceo-drove-his-previous-firm-to-insolvency/","name":"How Humanity Protocol CEO drove his previous firm to insolvency — Protos","type":"news_article","credibility":2},{"url":"https://www.dlnews.com/articles/people-culture/humanity-protocol-token-falls-founder-admits-network-is-mostly-bots/","name":"Humanity Protocol token plummets as founder admits network could be up to 88% bots — DL News","type":"news_article","credibility":2},{"url":"https://www.dlnews.com/articles/web3/humanity-protocol-raises-to-challenge-sam-altman-worldcoin/","name":"Humanity Protocol raises $20m to challenge Sam Altman's Worldcoin — DL News","type":"news_article","credibility":2}],"severity":"high"},{"content":"On June 5, 2026, at approximately 02:00 UTC, a Humanity Protocol director identified as Chong Yee Wai clicked a malicious link embedded in a phishing email impersonating Bithumb, one of South Korea's largest cryptocurrency exchanges. The email contained a malicious ZIP attachment with a file named 'hncagent.exe,' signed with a South Korean Hancom digital certificate. Upon execution, the malware deployed RDP Wrapper and fake Microsoft Defender binaries that evaded both Sophos and Windows Defender endpoint protection, granting the attacker full remote-desktop access to the director's laptop. On June 7, 2026, at 16:56 UTC, the attacker created a hidden user profile on the compromised device, establishing persistent remote-desktop access. On June 8, 2026, the coordinated on-chain attack was executed across Ethereum and BNB Smart Chain. The director's laptop stored sufficient multisig keys to breach two separate threshold requirements: three of six Gnosis Safe owner keys controlling the Hyperlane bridge ProxyAdmin on Ethereum, and three of five Safe owner keys on BNB Smart Chain. Because all threshold-crossing keys resided on a single device, the security model of the multisig arrangement was effectively negated. On Ethereum, the attacker transferred ProxyAdmin ownership to their own wallet and upgraded the bridge contract to a malicious implementation, draining approximately 141.18 million H tokens in a single transaction. On BNB Smart Chain, the attacker used the stolen ProxyAdmin control to install a contract with an unlimited mint function and minted approximately 100 million to 300 million new H tokens. An additional admin hot wallet holding roughly 6 million H tokens was also drained directly. The attacker sold stolen and newly minted tokens on Uniswap and PancakeSwap over approximately eight hours, realizing over $21 million in ETH at attacker-controlled addresses. Total losses across theft and unauthorized minting were estimated at $36 million, affecting approximately 150 operational wallets. Security experts including Cyvers CTO Meir Dolev characterized the incident as 'an operational security failure, not a smart-contract bug,' noting that 'one key trusted with both the funds and the power to rewrite the rules' made the breach possible.","heading":"June 2026 Security Breach — Attack Mechanics","sources":[{"url":"https://www.humanity.org/hincidentupdate","name":"$H Incident Summary — Official Humanity Protocol post-mortem","type":"official","credibility":1},{"url":"https://www.coindesk.com/tech/2026/06/09/humanity-s-usd36-million-exploit-happened-because-a-multisig-wallet-lived-on-one-laptop","name":"Humanity's $36 million exploit happened because a 'multisig' lived on one laptop — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.halborn.com/blog/post/explained-the-humanity-protocol-hack-june-2026","name":"Explained: The Humanity Protocol Hack (June 2026) — Halborn","type":"research","credibility":2},{"url":"https://www.cryptotimes.io/2026/06/09/three-breach-vectors-447m-tokens-humanity-protocol-details-h-exploit/","name":"Three Breach Vectors, 447M Tokens: Humanity Protocol Details $H Exploit — CryptoTimes","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2026/06/10/one-laptop-36-million-and-a-token-collapse-inside-the-humanity-protocol-exploit/","name":"One Laptop, $36 Million, and a Token Collapse: Inside the Humanity Protocol Exploit — CryptoTimes","type":"news_article","credibility":2},{"url":"https://decrypt.co/370485/humanity-protocol-loses-36m-after-private-keys-compromised-token-crashes-73","name":"Humanity Protocol Loses $36M After Private Keys 'Compromised,' Token Crashes 73% — Decrypt","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Blockchain security firm Quantstamp published forensic findings on June 11, 2026, attributing the Humanity Protocol attack to suspected DPRK-linked threat actors. Quantstamp identified several technical indicators consistent with North Korean cyber operations: the malware payload 'hncagent.exe' was signed with a Hancom digital certificate, a pattern reportedly characteristic of DPRK-affiliated intrusion tooling; the remote-access infrastructure included RDP Wrapper and counterfeit Microsoft Defender binaries designed to evade standard endpoint security; and the overall operational tactics — targeted social engineering against a specific employee, a multi-day staging period before the on-chain exploit, and token disposal across decentralized exchanges — matched patterns documented in prior DPRK-attributed crypto heists. Quantstamp stopped short of definitive attribution, describing the patterns as 'characteristic of DPRK-linked intrusions' rather than confirmed. No government body or law enforcement agency had publicly confirmed DPRK attribution as of June 25, 2026. The attack bears structural similarities to prior campaigns attributed to the Lazarus Group, a North Korean state-sponsored threat actor responsible for multiple large-scale cryptocurrency thefts. The Quantstamp report was released publicly and covered by CoinTelegraph, Crypto Briefing, and blockchain.news, among others.","heading":"North Korean Attribution — Quantstamp Findings","sources":[{"url":"https://cryptobriefing.com/humanity-protocol-36m-hack-north-korean-hackers/","name":"Humanity Protocol's $36M hack linked to suspected North Korean hackers, Quantstamp reports — Crypto Briefing","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2026/06/13/humanity-protocol-36m-hack-phishing-email-dprk-links-revealed/","name":"Humanity Protocol $36M Hack: Phishing Email, DPRK Links Revealed — CryptoTimes","type":"news_article","credibility":2},{"url":"https://blockchainreporter.net/quantstamp-investigation-links-humanity-protocol-hack-to-dprk-actors-141m-h-moved/","name":"Quantstamp Investigation Links Humanity Protocol Hack To DPRK Actors, 141M H Moved — BlockchainReporter","type":"news_article","credibility":2},{"url":"https://blockchain.news/news/humanity-protocol-hack-north-korean-link","name":"Humanity Protocol Hack Tied to North Korean Group, $36M Lost — blockchain.news","type":"news_article","credibility":2},{"url":"https://www.humanity.org/hincidentupdate","name":"$H Incident Summary — Official Humanity Protocol post-mortem","type":"official","credibility":1}],"severity":"critical"},{"content":"On June 9, 2026, on-chain investigator ZachXBT publicly questioned the team's account of events, posting: 'The incident seems possibly staged. I am not buying the teams story it's a convenient way for the active MM to have exited.' He also wrote: 'You choose to crime pump your token for weeks with zero fundamentals and think CT will blindly trust your story?' and demanded: 'Disclose your active MM agreements with the HK entity first.' ZachXBT alleged that the H token's price had been manipulated upward through coordinated pumping by an active market maker in the weeks preceding the exploit, and that the hack may have served as cover for an insider-coordinated exit. He cited the H token's 31% single-day surge on May 30 and a further 61% rally to a near-all-time high of approximately $0.67 on June 1 as suspicious pre-exploit price action. ZachXBT separately noted Founder Terence Kwok's history with Tink Labs as a pre-existing credibility concern. In a subsequent update, however, ZachXBT stated that further analysis of fund flows led him to conclude that the exploit and the suspected market-maker activity were separate events, and he walked back the insider-job framing. No definitive conclusion about insider involvement has been established by ZachXBT, law enforcement, or any independent forensic firm as of June 25, 2026. Humanity Protocol denied any insider involvement and maintained the breach was exclusively the result of the phishing-based DPRK-linked attack.","heading":"Inside-Job Allegations and ZachXBT Investigation","sources":[{"url":"https://www.cryptotimes.io/2026/06/09/zachxbt-calls-32m-humanity-protocol-hack-possibly-staged-h-crashes-86/","name":"ZachXBT Calls $32M Humanity Protocol Hack 'Possibly Staged,' $H Crashes 86% — CryptoTimes","type":"news_article","credibility":2},{"url":"https://crypto.news/zachxbt-rules-out-insider-theft-in-humanity-protocols-31m-exploit/","name":"ZachXBT rules out insider theft in Humanity Protocol's $31M exploit — crypto.news","type":"news_article","credibility":2},{"url":"https://news.bitcoin.com/humanity-protocol-exploit-zachxbt-staged/","name":"Humanity Protocol Loses $32M in Private Key Hack as ZachXBT Calls Incident 'Possibly Staged' — Bitcoin.com News","type":"news_article","credibility":2},{"url":"https://memeburn.com/is-humanity-protocols-32m-hack-an-exit-scam-what-zachxbts-investigation-reveals/","name":"Is Humanity Protocol's $32M Hack an Exit Scam? What ZachXBT's Investigation Reveals — Memeburn","type":"news_article","credibility":2}],"severity":"high"},{"content":"Security analysts and post-mortems have identified the root cause as a 'keys, not code' failure — the exploit did not leverage any vulnerability in the smart contract logic but instead used legitimately stolen signing authority. The critical operational failure was storing multiple multisig keys on a single device: the Ethereum bridge required 3-of-6 Gnosis Safe owner keys, and the BNB Smart Chain ProxyAdmin required 3-of-5. Both thresholds were crossable using only keys present on the compromised laptop of director Chong Yee Wai. Founder Terence Kwok acknowledged in public statements that 'keys were accidentally backed up to a compromised device during setup' and that while 'the team had set up a multisig wallet across four individuals,' the backup process created a single point of failure. The protocol had used a licensed custodian for the majority of token treasury and multi-party computation for the operations treasury, but bridge and proxy-admin keys fell outside this protection. The malware (hncagent.exe) successfully evaded both Sophos and Windows Defender endpoint security tools installed on the device. The project also removed its team page from its website following the incident, a decision not publicly explained by the team.","heading":"Operational Security Failures","sources":[{"url":"https://www.coindesk.com/tech/2026/06/09/humanity-s-usd36-million-exploit-happened-because-a-multisig-wallet-lived-on-one-laptop","name":"Humanity's $36 million exploit happened because a 'multisig' lived on one laptop — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.cryptotimes.io/2026/06/10/one-laptop-36-million-and-a-token-collapse-inside-the-humanity-protocol-exploit/","name":"One Laptop, $36 Million, and a Token Collapse: Inside the Humanity Protocol Exploit — CryptoTimes","type":"news_article","credibility":2},{"url":"https://www.halborn.com/blog/post/explained-the-humanity-protocol-hack-june-2026","name":"Explained: The Humanity Protocol Hack (June 2026) — Halborn","type":"research","credibility":2}],"severity":"critical"},{"content":"The H token entered the exploit window near an all-time high of approximately $0.67-$0.73, following a 61% rally on June 1, 2026, and a 31% single-day surge on May 30. Within 12 hours of the on-chain attack beginning on June 8, the token fell to approximately $0.05-$0.08, a decline of 80-89%. Multiple sources cite slightly different peak-to-trough figures ranging from 73% (Decrypt, measured at time of publication) to 89% (CoinGecko intraday low). The H token's market capitalization lost an estimated $1.65 billion in value. Tokens were sold by the attacker across Uniswap and PancakeSwap over an eight-hour window, flooding decentralized exchange liquidity pools. The attacker is confirmed to have realized over $21 million in ETH at addresses identified by Quantstamp. Following Humanity Protocol's announcement of a recovery and compensation plan on June 16, 2026, the H token staged a partial recovery rally of approximately 44%, though it remained far below pre-hack levels.","heading":"Market Impact and Token Collapse","sources":[{"url":"https://www.coindesk.com/tech/2026/06/09/humanity-protocol-token-crashes-more-than-80-after-a-usd32-million-private-key-hack","name":"Humanity Protocol token crashes more than 80% after a $32 million private-key hack — CoinDesk","type":"news_article","credibility":1},{"url":"https://decrypt.co/370485/humanity-protocol-loses-36m-after-private-keys-compromised-token-crashes-73","name":"Humanity Protocol Loses $36M After Private Keys 'Compromised,' Token Crashes 73% — Decrypt","type":"news_article","credibility":2},{"url":"https://nftevening.com/humanity-protocol-h-token-crashes-private-key-breach/","name":"Humanity Protocol's H Token Crashes Over 80% After $36M Private-Key Breach — NFT Evening","type":"news_article","credibility":2},{"url":"https://www.bitget.com/news/detail/12560605456753","name":"Humanity Protocol Token Jumps 44% in Post-Exploit Relief Rally — Bitget News","type":"news_article","credibility":2}],"severity":"critical"},{"content":"On June 16, 2026, Humanity Protocol announced a comprehensive recovery strategy. The project deployed a new audited ERC-20 smart contract on Ethereum to replace the compromised H token across Ethereum, BNB Chain, and Humanity Mainnet. Pre-exploit snapshots were taken on Ethereum at block 25,274,179, BNB Chain at block 103,071,069, and Humanity Mainnet at block 24,247,803. Eligible holders receive new H tokens at a 1:1 ratio to their pre-exploit balances via direct airdrop to externally owned accounts; assets held in liquidity pools transfer to a dedicated vault pending stakeholder verification. A dedicated H Compensation Fund was established for complex recovery cases including third-party protocol integrations, decentralized liquidity pool exposure, and investors who purchased H tokens after the snapshot date but continued to hold them. A $1 million USDT bounty was offered for information leading to recovery of stolen funds. Due to the exploit's connection to alleged DPRK-affiliated actors, all claimants seeking compensation from the fund are required to complete identity verification procedures before distribution. A dedicated claims portal was launched to process compensation requests. Humanity Mainnet is scheduled to relaunch in the coming weeks with the new H token as the network's native gas token. The BNB Smart Chain deployment was abandoned as unrecoverable, as attackers retained minting control of that contract; the Ethereum deployment was secured via an untouched multisig.","heading":"Recovery Plan and Compensation","sources":[{"url":"https://www.cryptotimes.io/2026/06/16/humanity-protocol-unveils-h-token-recovery-and-airdrop-plan-post-36m-hack/","name":"Humanity Protocol Unveils H Token Recovery and Airdrop Plan Post $36M Hack — CryptoTimes","type":"news_article","credibility":2},{"url":"https://www.humanity.org/hincidentupdate","name":"$H Incident Summary — Official Humanity Protocol post-mortem","type":"official","credibility":1},{"url":"https://cryip.co/humanity-protocol-replace-compromised-h-tokens-new-erc20-airdrop/","name":"Humanity Protocol to Replace Compromised $H Tokens With New ERC-20 Airdrop — Cryip","type":"news_article","credibility":3},{"url":"https://thedefiant.io/news/tokens/humanity-protocol-h-token-airdrop-recovery-36m-exploit","name":"Humanity Protocol Launches New H Token Airdrop After $36M Exploit — The Defiant","type":"news_article","credibility":2}],"severity":"medium"},{"content":"Before the June 2026 hack, Humanity Protocol faced several credibility challenges. In June 2025, DL News published a report based on a leaked conversation in which founder Terence Kwok admitted that of approximately 9 million Human IDs created, only about 1 million had completed biometric or social verification, implying up to 88% were bots — a significant problem for a platform whose core value proposition is distinguishing humans from automated accounts. The H token fell more than 61% from its launch price following that disclosure. Founder Terence Kwok's previous venture, Tink Labs, raised approximately $170 million from investors including SoftBank before burning through the capital and entering insolvency in 2019. SoftBank had alleged that Tink Labs was funnelling money from the joint venture in Japan to stay afloat in other regions, according to Financial Times reporting cited by Protos. ZachXBT independently cited Kwok's Tink Labs history as a credibility concern in the context of his initial inside-job allegations. The project removed its team page from its website following the June 2026 hack, a decision not publicly explained by the team.","heading":"Pre-Existing Credibility Concerns","sources":[{"url":"https://www.dlnews.com/articles/people-culture/humanity-protocol-token-falls-founder-admits-network-is-mostly-bots/","name":"Humanity Protocol token plummets as founder admits network could be up to 88% bots — DL News","type":"news_article","credibility":2},{"url":"https://protos.com/how-humanity-protocol-ceo-drove-his-previous-firm-to-insolvency/","name":"How Humanity Protocol CEO drove his previous firm to insolvency — Protos","type":"news_article","credibility":2},{"url":"https://www.ccn.com/news/crypto/humanity-protocol-terence-kwok-tink-labs/","name":"Humanity Protocol Boss Terence Kwok Nearly Bankrupted Unicorn Phone Company Tink Labs — CCN","type":"news_article","credibility":2}],"severity":"high"}],"timeline":[{"date":"2024-02-20","event":"Humanity Protocol emerged from stealth, announced publicly as a palm-scan biometric identity project developed by the Human Institute with Animoca Brands and Polygon Labs.","source":"DL News","source_url":"https://www.dlnews.com/articles/web3/humanity-protocol-raises-to-challenge-sam-altman-worldcoin/"},{"date":"2024-05","event":"Humanity Protocol raised $30 million led by Kingsway Capital at a $1 billion fully diluted valuation.","source":"Biometric Update","source_url":"https://www.biometricupdate.com/202501/humanity-protocol-raises-20m-at-1-1b-valuation","date_original":"2024-05-01"},{"date":"2025-01-27","event":"Pantera Capital and Jump Crypto led a $20 million funding round, bringing the fully diluted valuation to $1.1 billion.","source":"The Block","source_url":"https://www.theblock.co/post/337538/pantera-capital-and-jump-crypto-lead-20-million-funding-round-for-humanity-protocol"},{"date":"2025-06-27","event":"DL News reported that founder Terence Kwok admitted in a leaked conversation that up to 88% of the 9 million Human IDs created may be bots, with only approximately 1 million verifiably human. The H token fell over 61% following the disclosure.","source":"DL News","source_url":"https://www.dlnews.com/articles/people-culture/humanity-protocol-token-falls-founder-admits-network-is-mostly-bots/"},{"date":"2026-05-30","event":"H token surged 31% in 24 hours with trading volume up 134%, beginning a pre-exploit price rally that ZachXBT would later characterize as suspicious.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2026/06/10/one-laptop-36-million-and-a-token-collapse-inside-the-humanity-protocol-exploit/"},{"date":"2026-06","event":"H token rallied approximately 61%, reaching a near-all-time high of approximately $0.67.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2026/06/10/one-laptop-36-million-and-a-token-collapse-inside-the-humanity-protocol-exploit/","date_original":"2026-06-01"},{"date":"2026-06-05","event":"At approximately 02:00 UTC, Humanity Protocol director Chong Yee Wai clicked a malicious link in a phishing email impersonating Bithumb exchange. The attachment hncagent.exe, signed with a Hancom certificate, installed remote-access malware evading Sophos and Windows Defender.","source":"Humanity Protocol official incident summary","source_url":"https://www.humanity.org/hincidentupdate"},{"date":"2026-06-07","event":"At 16:56 UTC, the attacker created a hidden user profile on the compromised device, establishing persistent remote-desktop access.","source":"Humanity Protocol official incident summary","source_url":"https://www.humanity.org/hincidentupdate"},{"date":"2026-06-08","event":"Coordinated on-chain attack executed across Ethereum and BNB Smart Chain. Attacker drained approximately 141.18 million H tokens from the Ethereum Hyperlane bridge and minted approximately 100-300 million H tokens on BNB Smart Chain using stolen ProxyAdmin control. An admin hot wallet holding approximately 6 million H tokens was also drained.","source":"CoinDesk / Humanity Protocol post-mortem","source_url":"https://www.coindesk.com/tech/2026/06/09/humanity-s-usd36-million-exploit-happened-because-a-multisig-wallet-lived-on-one-laptop"},{"date":"2026-06-09","event":"Humanity Protocol publicly disclosed the breach. The H token crashed from approximately $0.67-$0.73 to a low of approximately $0.05-$0.08, a decline of 80-89%. Total losses reported at approximately $32-$36 million. Founder Terence Kwok warned users to avoid the bridge and liquidity pools.","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2026/06/09/humanity-protocol-token-crashes-more-than-80-after-a-usd32-million-private-key-hack"},{"date":"2026-06-09","event":"On-chain investigator ZachXBT publicly alleged the incident was possibly staged and suggested the hack served as cover for an active market maker to exit positions, citing suspicious pre-exploit price action and demanding disclosure of market-maker agreements.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2026/06/09/zachxbt-calls-32m-humanity-protocol-hack-possibly-staged-h-crashes-86/"},{"date":"2026-06-11","event":"Quantstamp published forensic findings attributing the attack to suspected DPRK-linked threat actors based on Hancom certificate signatures, RDP Wrapper tooling, and malware behavioral patterns consistent with North Korean cyber operations.","source":"Crypto Briefing","source_url":"https://cryptobriefing.com/humanity-protocol-36m-hack-north-korean-hackers/"},{"date":"2026-06-12","event":"Humanity Protocol published the Quantstamp post-mortem and expanded the incident scope to approximately 447 million H tokens affected across theft and unauthorized minting. The project announced a $1 million USDT bounty for information leading to fund recovery.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2026/06/09/three-breach-vectors-447m-tokens-humanity-protocol-details-h-exploit/"},{"date":"2026-06-16","event":"Humanity Protocol announced a full recovery and compensation plan: 1:1 airdrop of a new audited ERC-20 H token to pre-exploit snapshot holders, an H Compensation Fund for complex cases, a dedicated claims portal, and mandatory identity verification for claimants.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2026/06/16/humanity-protocol-unveils-h-token-recovery-and-airdrop-plan-post-36m-hack/"}],"sources_used":[{"url":"https://www.humanity.org/hincidentupdate","name":"$H Incident Summary — Official Humanity Protocol post-mortem","type":"official","archive_url":"http://web.archive.org/web/20260616164414/https://www.humanity.org/hincidentupdate","credibility":1,"archive_timestamp":"2026-06-16T16:44:14+00:00"},{"url":"https://www.coindesk.com/tech/2026/06/09/humanity-s-usd36-million-exploit-happened-because-a-multisig-wallet-lived-on-one-laptop","name":"Humanity's $36 million exploit happened because a 'multisig' lived on one laptop — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260718095540/https://www.coindesk.com/tech/2026/06/09/humanity-s-usd36-million-exploit-happened-because-a-multisig-wallet-lived-on-one-laptop","credibility":1,"archive_timestamp":"2026-07-18T09:55:40+00:00"},{"url":"https://www.coindesk.com/tech/2026/06/09/humanity-protocol-token-crashes-more-than-80-after-a-usd32-million-private-key-hack","name":"Humanity Protocol token crashes more than 80% after a $32 million private-key hack — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260610155427/https://www.coindesk.com/tech/2026/06/09/humanity-protocol-token-crashes-more-than-80-after-a-usd32-million-private-key-hack","credibility":1,"archive_timestamp":"2026-06-10T15:54:27+00:00"},{"url":"https://cryptobriefing.com/humanity-protocol-36m-hack-north-korean-hackers/","name":"Humanity Protocol's $36M hack linked to suspected North Korean hackers, Quantstamp reports — Crypto Briefing","type":"news_article","archive_url":"https://web.archive.org/web/20260726084703/https://cryptobriefing.com/humanity-protocol-36m-hack-north-korean-hackers/","credibility":2,"archive_timestamp":"2026-07-26T08:47:03+00:00"},{"url":"https://cryptobriefing.com/quantstamp-h-token-breach-north-korean-hackers/","name":"Quantstamp links June 8 H token breach to North Korean hackers — Crypto Briefing","type":"news_article","archive_url":"https://web.archive.org/web/20260726143054/https://cryptobriefing.com/quantstamp-h-token-breach-north-korean-hackers/","credibility":2,"archive_timestamp":"2026-07-26T14:30:54+00:00"},{"url":"https://www.cryptotimes.io/2026/06/09/zachxbt-calls-32m-humanity-protocol-hack-possibly-staged-h-crashes-86/","name":"ZachXBT Calls $32M Humanity Protocol Hack 'Possibly Staged,' $H Crashes 86% — CryptoTimes","type":"news_article","archive_url":"http://web.archive.org/web/20260726103152/https://www.cryptotimes.io/2026/06/09/zachxbt-calls-32m-humanity-protocol-hack-possibly-staged-h-crashes-86/","credibility":2,"archive_timestamp":"2026-07-26T10:31:52+00:00"},{"url":"https://crypto.news/zachxbt-rules-out-insider-theft-in-humanity-protocols-31m-exploit/","name":"ZachXBT rules out insider theft in Humanity Protocol's $31M exploit — crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20260721164532/https://crypto.news/zachxbt-rules-out-insider-theft-in-humanity-protocols-31m-exploit/","credibility":2,"archive_timestamp":"2026-07-21T16:45:32+00:00"},{"url":"https://www.cryptotimes.io/2026/06/13/humanity-protocol-36m-hack-phishing-email-dprk-links-revealed/","name":"Humanity Protocol $36M Hack: Phishing Email, DPRK Links Revealed — CryptoTimes","type":"news_article","archive_url":"https://web.archive.org/web/20260726103253/https://www.cryptotimes.io/2026/06/13/humanity-protocol-36m-hack-phishing-email-dprk-links-revealed/","credibility":2,"archive_timestamp":"2026-07-26T10:32:53+00:00"},{"url":"https://www.cryptotimes.io/2026/06/10/one-laptop-36-million-and-a-token-collapse-inside-the-humanity-protocol-exploit/","name":"One Laptop, $36 Million, and a Token Collapse: Inside the Humanity Protocol Exploit — CryptoTimes","type":"news_article","archive_url":"https://web.archive.org/web/20260726103157/https://www.cryptotimes.io/2026/06/10/one-laptop-36-million-and-a-token-collapse-inside-the-humanity-protocol-exploit/","credibility":2,"archive_timestamp":"2026-07-26T10:31:57+00:00"},{"url":"https://www.cryptotimes.io/2026/06/09/three-breach-vectors-447m-tokens-humanity-protocol-details-h-exploit/","name":"Three Breach Vectors, 447M Tokens: Humanity Protocol Details $H Exploit — CryptoTimes","type":"news_article","archive_url":"https://web.archive.org/web/20260726103126/https://www.cryptotimes.io/2026/06/09/three-breach-vectors-447m-tokens-humanity-protocol-details-h-exploit/","credibility":2,"archive_timestamp":"2026-07-26T10:31:26+00:00"},{"url":"https://www.cryptotimes.io/2026/06/16/humanity-protocol-unveils-h-token-recovery-and-airdrop-plan-post-36m-hack/","name":"Humanity Protocol Unveils H Token Recovery and Airdrop Plan Post $36M Hack — CryptoTimes","type":"news_article","archive_url":"http://web.archive.org/web/20260616225346/https://www.cryptotimes.io/2026/06/16/humanity-protocol-unveils-h-token-recovery-and-airdrop-plan-post-36m-hack/","credibility":2,"archive_timestamp":"2026-06-16T22:53:46+00:00"},{"url":"https://decrypt.co/370485/humanity-protocol-loses-36m-after-private-keys-compromised-token-crashes-73","name":"Humanity Protocol Loses $36M After Private Keys 'Compromised,' Token Crashes 73% — Decrypt","type":"news_article","archive_url":"http://web.archive.org/web/20260610142853/https://decrypt.co/370485/humanity-protocol-loses-36m-after-private-keys-compromised-token-crashes-73","credibility":2,"archive_timestamp":"2026-06-10T14:28:53+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-humanity-protocol-hack-june-2026","name":"Explained: The Humanity Protocol Hack (June 2026) — Halborn","type":"research","archive_url":"http://web.archive.org/web/20260718095540/https://www.halborn.com/blog/post/explained-the-humanity-protocol-hack-june-2026","credibility":2,"archive_timestamp":"2026-07-18T09:55:40+00:00"},{"url":"https://blockchainreporter.net/quantstamp-investigation-links-humanity-protocol-hack-to-dprk-actors-141m-h-moved/","name":"Quantstamp Investigation Links Humanity Protocol Hack To DPRK Actors, 141M H Moved — BlockchainReporter","type":"news_article","archive_url":"http://web.archive.org/web/20260726185739/https://blockchainreporter.net/quantstamp-investigation-links-humanity-protocol-hack-to-dprk-actors-141m-h-moved/","credibility":2,"archive_timestamp":"2026-07-26T18:57:39+00:00"},{"url":"https://blockchain.news/news/humanity-protocol-hack-north-korean-link","name":"Humanity Protocol Hack Tied to North Korean Group, $36M Lost — blockchain.news","type":"news_article","archive_url":"http://web.archive.org/web/20260726081745/https://blockchain.news/news/humanity-protocol-hack-north-korean-link","credibility":2,"archive_timestamp":"2026-07-26T08:17:45+00:00"},{"url":"https://www.theblock.co/post/337538/pantera-capital-and-jump-crypto-lead-20-million-funding-round-for-humanity-protocol","name":"Pantera Capital and Jump Crypto lead $20 million funding round for Humanity Protocol — The Block","type":"news_article","archive_url":"https://web.archive.org/web/20260726230925/https://www.theblock.co/post/337538/pantera-capital-and-jump-crypto-lead-20-million-funding-round-for-humanity-protocol","credibility":2,"archive_timestamp":"2026-07-26T23:09:25+00:00"},{"url":"https://www.biometricupdate.com/202501/humanity-protocol-raises-20m-at-1-1b-valuation","name":"Humanity Protocol raises $20M at $1.1B valuation — Biometric Update","type":"news_article","archive_url":"http://web.archive.org/web/20260218234145/https://www.biometricupdate.com/202501/humanity-protocol-raises-20m-at-1-1b-valuation","credibility":2,"archive_timestamp":"2026-02-18T23:41:45+00:00"},{"url":"https://protos.com/how-humanity-protocol-ceo-drove-his-previous-firm-to-insolvency/","name":"How Humanity Protocol CEO drove his previous firm to insolvency — Protos","type":"news_article","archive_url":"http://web.archive.org/web/20260308133731/https://protos.com/how-humanity-protocol-ceo-drove-his-previous-firm-to-insolvency/","credibility":2,"archive_timestamp":"2026-03-08T13:37:31+00:00"},{"url":"https://www.dlnews.com/articles/people-culture/humanity-protocol-token-falls-founder-admits-network-is-mostly-bots/","name":"Humanity Protocol token plummets as founder admits network could be up to 88% bots — DL News","type":"news_article","archive_url":"http://web.archive.org/web/20260630190423/https://www.dlnews.com/articles/people-culture/humanity-protocol-token-falls-founder-admits-network-is-mostly-bots/","credibility":2,"archive_timestamp":"2026-06-30T19:04:23+00:00"},{"url":"https://www.ccn.com/news/crypto/humanity-protocol-terence-kwok-tink-labs/","name":"Humanity Protocol Boss Terence Kwok Nearly Bankrupted Unicorn Phone Company Tink Labs — CCN","type":"news_article","archive_url":"http://web.archive.org/web/20250803073934/https://www.ccn.com/news/crypto/humanity-protocol-terence-kwok-tink-labs/","credibility":2,"archive_timestamp":"2025-08-03T07:39:34+00:00"},{"url":"https://www.dlnews.com/articles/web3/humanity-protocol-raises-to-challenge-sam-altman-worldcoin/","name":"Humanity Protocol raises $20m to challenge Sam Altman's Worldcoin — DL News","type":"news_article","archive_url":"http://web.archive.org/web/20260703062826/https://www.dlnews.com/articles/web3/humanity-protocol-raises-to-challenge-sam-altman-worldcoin/","credibility":2,"archive_timestamp":"2026-07-03T06:28:26+00:00"},{"url":"https://thedefiant.io/news/tokens/humanity-protocol-h-token-airdrop-recovery-36m-exploit","name":"Humanity Protocol Launches New H Token Airdrop After $36M Exploit — The Defiant","type":"news_article","archive_url":"http://web.archive.org/web/20260617213521/https://thedefiant.io/news/tokens/humanity-protocol-h-token-airdrop-recovery-36m-exploit","credibility":2,"archive_timestamp":"2026-06-17T21:35:21+00:00"},{"url":"https://news.bitcoin.com/humanity-protocol-exploit-zachxbt-staged/","name":"Humanity Protocol Loses $32M in Private Key Hack as ZachXBT Calls Incident 'Possibly Staged' — Bitcoin.com News","type":"news_article","archive_url":"http://web.archive.org/web/20260610131517/https://news.bitcoin.com/humanity-protocol-exploit-zachxbt-staged/","credibility":2,"archive_timestamp":"2026-06-10T13:15:17+00:00"},{"url":"https://www.ccn.com/education/crypto/humanity-protocol-private-key-hack-36m-h-token-crash/","name":"'Chinese Worldcoin' Crashes 85% After $36 Million+ Private Key Hack — CCN","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-06-14T07:25:34.017695+00:00","updated_at":"2026-07-26T23:10:23.169828+00:00"}}