← Huma Finance1 decision on this page
Audit log
Every state-changing event for Huma Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.
- #1publishby system:backfill2026-11-06 00:18:54ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 465,904,842
- sig
2PK8iX3Xt4yC…BRiRuqPJexplorer ↗- hash
2cKRML8B5Z8v…DU4HJ9Tisha256 → base58
verifying row…full verify ↗canonical bytes (10960 B) ▸
{"actor":"system:backfill","investigation_id":"8159b06b-e579-4837-be2f-23fe825f7db0","kind":"publish","page_slug":"huma-finance","published_at":"2026-11-06T00:18:53.981Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Huma Finance","sections":[{"content":"Huma Finance describes itself as the first \"PayFi\" network, a category it uses for decentralized finance products that extend credit against expected future income or receivables rather than against speculative crypto collateral. The protocol initially launched on Stellar before expanding to Polygon and later to Solana, where it reported rapid growth in transaction volume following a \"Huma 2.0\" relaunch. Huma offers two product lines: a permissionless retail-facing yield and financing product, and a permissioned institutional product aimed at structured finance and tranched credit. The HUMA token, with a reported maximum supply of 10 billion, is used for governance voting and staking. Volume and partnership claims (including a reported $4 billion-plus in cumulative transaction volume and partnerships with Circle, Fireblocks, Kamino and Jupiter) originate largely from Huma's own press materials and have not been independently verified by a third party.","heading":"Overview and Business Model","severity":"low","sources":[{"credibility":2,"name":"Huma Finance Launches on Solana, Expanding Access to On-Chain Payment Financing for Global Businesses (PR Newswire)","type":"news_article","url":"https://prnewswire.com/news-releases/huma-finance-launches-on-solana-expanding-access-to-on-chain-payment-financing-for-global-businesses-302303354.html"},{"credibility":2,"name":"Huma Surpasses $4 Billion in Transactions Just Two Weeks After Launching 2.0 on Solana (Decrypt)","type":"news_article","url":"https://decrypt.co/316435/huma-surpasses-4-billion-in-transactions-just-two-weeks-after-launching-2-0-on-solana"}]},{"content":"Huma raised an $8.3 million seed round in February 2023 led by Race Capital and Distributed Global, with participation from ParaFi Capital, Circle Ventures, Folius Ventures and Robot Ventures. In September 2024, Huma announced a $38 million raise described as a combination of equity investment and investment into real-world assets on its platform, with Distributed Global reported as lead investor and the Stellar Development Foundation contributing $10 million. The round followed Huma's acquisition of Arf, a cross-border payment financing firm, in April 2024. Total funding figures reported by third-party aggregators are inconsistent (ranging from roughly $18 million to $46 million across different trackers), which should be treated as a data-quality caveat rather than a red flag specific to Huma.","heading":"Funding History","severity":"low","sources":[{"credibility":2,"name":"Huma Raises $8.3M Seed Round For Income-Backed DeFi Lending Platform (Benzinga)","type":"news_article","url":"https://www.benzinga.com/markets/cryptocurrency/23/02/31051923/huma-raises-8-3m-seed-round-for-income-backed-defi-lending-platform"},{"credibility":2,"name":"Huma Secures $38M Investment, Eyes Expansion to Solana and Stellar (crypto.news)","type":"news_article","url":"https://crypto.news/huma-secures-38m-investment-eyes-expansion-to-solana-and-stellars-soroban"}]},{"content":"On or shortly before May 11, 2026, an attacker drained approximately $101,400 in USDC and USDC.e from Huma Finance's deprecated V1 \"BaseCreditPool\" smart contracts on the Polygon network. According to security firm Blockaid, the loss stemmed from a logic flaw in a function called refreshAccount(), which incorrectly moved borrower accounts into a \"GoodStanding\" status without proper validation checks, allowing the attacker to withdraw funds from treasury-linked pools as if they were an approved borrower in a single scripted transaction. Reporting attributes the loss to a business-logic error rather than a private-key compromise or cryptographic break. Huma said the affected V1 pools on Polygon were already being wound down at the time of the attack, that it has since paused all remaining V1 contracts, and that user deposits together with its newer PST token and Solana-based Huma 2.0 deployment — described by the company as a complete rebuild unconnected to the vulnerable V1 code — were not affected. As of the most recent reporting found, Huma had not published a full technical postmortem of the incident, and no law-enforcement or regulatory action connected to the exploit was identified.","heading":"May 2026 Exploit of Legacy V1 Contracts (Polygon)","severity":"medium","sources":[{"credibility":2,"name":"Huma Finance Legacy V1 Contract on Polygon Exploited for $101,400 (crypto.news)","type":"news_article","url":"https://crypto.news/huma-finance-legacy-v1-contract-on-polygon-exploited-for-101400-usdc/"},{"credibility":2,"name":"Huma Finance Old v1 Contract on Polygon Hacked, 101,400 USDC Stolen (KuCoin News)","type":"news_article","url":"https://www.kucoin.com/news/flash/huma-finance-old-v1-contract-on-polygon-hacked-101-400-usdc-stolen"},{"credibility":2,"name":"DeFi platforms Ink and Huma Finance hit by Polygon exploits (Tangem)","type":"news_article","url":"https://tangem.com/en/news/security/24284-defi-platforms-ink-and-huma-finance-hit-by-polygon-exploits/"}]},{"content":"No lawsuit, SEC/CFTC enforcement action, or criminal allegation naming Huma Finance, its protocol, or named individuals associated with it was found in available sources. Searches for \"Huma\" combined with \"scam,\" \"fraud,\" \"lawsuit,\" and \"SEC\" returned only unrelated matters involving similarly named but distinct entities, including securities class actions against Humacyte, Inc. (a biotechnology company) and litigation involving Humm/Latitude Financial — none of which concern Huma Finance. This absence of adverse legal findings should not be read as a clean bill of health; it reflects the limits of what public search surfaced as of this writing, and Huma Finance is a relatively young, moderately sized protocol that may not yet have attracted regulatory scrutiny proportionate to larger platforms.","heading":"Legal and Regulatory Record","severity":"low","sources":[{"credibility":2,"name":"Huma Finance Reports $101K Exploit of Deprecated V1 Contracts on Polygon (KuCoin News)","type":"news_article","url":"https://www.kucoin.com/news/flash/huma-finance-reports-101k-exploit-of-deprecated-v1-contracts-on-polygon"}]}],"sources_used":[{"credibility":2,"name":"Huma Finance Launches on Solana, Expanding Access to On-Chain Payment Financing for Global Businesses (PR Newswire)","type":"news_article","url":"https://prnewswire.com/news-releases/huma-finance-launches-on-solana-expanding-access-to-on-chain-payment-financing-for-global-businesses-302303354.html"},{"credibility":2,"name":"Huma Surpasses $4 Billion in Transactions Just Two Weeks After Launching 2.0 on Solana (Decrypt)","type":"news_article","url":"https://decrypt.co/316435/huma-surpasses-4-billion-in-transactions-just-two-weeks-after-launching-2-0-on-solana"},{"credibility":2,"name":"Huma Raises $8.3M Seed Round For Income-Backed DeFi Lending Platform (Benzinga)","type":"news_article","url":"https://www.benzinga.com/markets/cryptocurrency/23/02/31051923/huma-raises-8-3m-seed-round-for-income-backed-defi-lending-platform"},{"credibility":2,"name":"Huma Secures $38M Investment, Eyes Expansion to Solana and Stellar (crypto.news)","type":"news_article","url":"https://crypto.news/huma-secures-38m-investment-eyes-expansion-to-solana-and-stellars-soroban"},{"credibility":2,"name":"Huma Finance Legacy V1 Contract on Polygon Exploited for $101,400 (crypto.news)","type":"news_article","url":"https://crypto.news/huma-finance-legacy-v1-contract-on-polygon-exploited-for-101400-usdc/"},{"credibility":2,"name":"Huma Finance Old v1 Contract on Polygon Hacked, 101,400 USDC Stolen (KuCoin News)","type":"news_article","url":"https://www.kucoin.com/news/flash/huma-finance-old-v1-contract-on-polygon-hacked-101-400-usdc-stolen"},{"credibility":2,"name":"Huma Finance Reports $101K Exploit of Deprecated V1 Contracts on Polygon (KuCoin News)","type":"news_article","url":"https://www.kucoin.com/news/flash/huma-finance-reports-101k-exploit-of-deprecated-v1-contracts-on-polygon"},{"credibility":2,"name":"DeFi platforms Ink and Huma Finance hit by Polygon exploits (Tangem)","type":"news_article","url":"https://tangem.com/en/news/security/24284-defi-platforms-ink-and-huma-finance-hit-by-polygon-exploits/"}],"summary":"Huma Finance (also styled Huma Protocol) is a DeFi \"PayFi\" (payment financing) network that offers income- and receivables-backed credit, operating on Stellar, Solana and (formerly) Polygon, with a native HUMA token. The protocol has raised venture funding from firms including Distributed Global, Race Capital, Circle Ventures and the Stellar Development Foundation, and reports billions of dollars in cumulative transaction volume, though these figures are self-reported and have not been independently audited. In May 2026 a deprecated V1 contract deployment on Polygon was exploited for roughly $101,400, which the protocol attributes to a business-logic flaw rather than a key compromise; no lawsuit, regulatory action, or criminal allegation against Huma Finance or its founders was found in available sources.","timeline":[{"date":"2023-02","event":"Huma Finance closes an $8.3 million seed round led by Race Capital and Distributed Global.","source":"Benzinga","source_url":"https://www.benzinga.com/markets/cryptocurrency/23/02/31051923/huma-raises-8-3m-seed-round-for-income-backed-defi-lending-platform"},{"date":"2024-04","event":"Huma acquires cross-border payment financing firm Arf.","source":"crypto.news","source_url":"https://crypto.news/huma-secures-38m-investment-eyes-expansion-to-solana-and-stellars-soroban"},{"date":"2024-09","event":"Huma announces a $38 million raise (equity plus RWA investment) led by Distributed Global, with a $10 million contribution from the Stellar Development Foundation, ahead of expansion to Solana.","source":"crypto.news","source_url":"https://crypto.news/huma-secures-38m-investment-eyes-expansion-to-solana-and-stellars-soroban"},{"date":"2024","event":"Huma Finance launches on Solana, expanding from its original Stellar deployment.","source":"PR Newswire","source_url":"https://prnewswire.com/news-releases/huma-finance-launches-on-solana-expanding-access-to-on-chain-payment-financing-for-global-businesses-302303354.html"},{"date":"2026-05-11","date_evidence":"May 11, 2026 at 8:00 PM UTC","event":"Huma discloses that deprecated V1 BaseCreditPool contracts on Polygon were exploited for approximately $101,400 in USDC and USDC.e; V1 contracts are paused and the company says V2/Solana deployments and user deposits are unaffected.","source":"crypto.news","source_url":"https://crypto.news/huma-finance-legacy-v1-contract-on-polygon-exploited-for-101400-usdc/"}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 3dd5a57f-ef65-4ffb-bd25-c9898ca5782c
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.