Humanity Protocol June 2026 Exploit
Last changed 2026-10-16 · Community evidence — A moderator accepted a piece of community-submitted evidence: cryptotimes.io confirms the attacker converted stolen funds to USDC and deposited them on KuCoin, and that the project plans to abandon the affected (BNB Smart Chain) chain and focus on recovery — matching the note. Trust score now 9. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·47NWPM…Xg1QSummary
On June 8-9, 2026, Humanity Protocol suffered a coordinated cross-chain exploit in which attackers compromised seven private keys stored on a single malware-infected employee laptop, draining approximately 447 million H tokens — valued at $32-36 million — across Ethereum and BNB Smart Chain. Blockchain investigator ZachXBT initially alleged the incident was 'possibly staged' based on pre-funded attacker wallets, suspicious market-making activity, and DEX-only token dumps, though he subsequently revised his assessment, concluding the private key compromise and the earlier suspicious market-making were independent events. The H token crashed between 87-89% within hours of the attack and remained deeply depressed ahead of a 266.5 million token unlock scheduled for June 25, 2026.
Connected Entities
5 entities · 60 linked investigations- Humanity Protocol June 2026 Exploit→mentioned with→Ethereum(80%)
- Humanity Protocol June 2026 Exploit→mentioned with→ZachXBT(70%)
- Terence Kwok — Humanity Protocol Staged Hack→mentioned with→ZachXBT(70%)
- Terence Kwok — Humanity Protocol Staged Hack→mentioned with→Ethereum(80%)
- ZachXBT→mentioned with→Ethereum(70%)
- ZachXBT→mentioned with→Binance(60%)
- Binance→mentioned with→Ethereum(65%)
- Terence Kwok — Humanity Protocol Staged Hack→mentioned with→Binance(70%)
- Humanity Protocol June 2026 Exploit→mentioned with→Terence Kwok — Humanity Protocol Staged Hack(80%)
- Humanity Protocol June 2026 Exploit→mentioned with→Binance(70%)
Community submissions
- https://www.cryptotimes.io/2026/06/21/humanity-protocol-hackers-move-stolen-funds-to-kucoin-wallets/(www.cryptotimes.io)
“[Scout] The Humanity Protocol attacker converted part of the stolen funds into USDC and deposited them into KuCoin. The project said it plans to abandon the affected chain and focus on recovery efforts for users and the broader ecosystem.”
— avoid-scout(unverified)
“[Scout] ZachXBT revised his conclusion on the Humanity Protocol exploit, stating the private-key compromise and the earlier suspicious market-making/OTC activity are independent of one another and not related, after earlier questioning whether the team had been pumping the token before the attack.”
— avoid-scout(unverified)
5 submissions awaiting moderator review.
Timeline(10 events)
April 2026
Alleged period during which attacker wallets were created and funded from exchanges and mixers, weeks before the exploit, according to on-chain analyst Elton's forensic findings cited by ZachXBT.
CryptoTimes / ZachXBT via Memeburn30 May 2026
H token surged 31% with a 134% volume increase, beginning a sustained price pump ahead of the exploit.
CryptoTimes8 June 2026
Coordinated cross-chain attack initiated. Attackers compromised a malware-infected developer laptop containing seven private keys. Admin hot wallet drained of approximately 6 million H tokens. Ethereum Gnosis Safe co-signer quorum achieved; ProxyAdmin transferred and bridge upgraded to malicious implementation, draining 141 million H tokens. BNB Chain Safe quorum achieved; ProxyAdmin seized and approximately 300 million H tokens unauthorized-minted.
crypto.news post-mortem reporting9 June 2026
Exploit disclosed publicly. Approximately 17+ project wallets confirmed drained. H token crashed from approximately $0.67-$0.73 to intraday lows near $0.05-$0.08, a decline of 87-93%. Stolen H tokens actively swapped for ETH on DEXes including Kyber Network and PancakeSwap. Approximately $23.7 million converted to ETH. CEO Terence Kwok confirmed breach and advised users to avoid bridge and liquidity pools.
CoinDesk / CryptoTimes9 June 2026
ZachXBT posted publicly calling the incident 'possibly staged,' citing pre-funded attacker wallets, DEX-only dumps, coordinated cross-chain execution, and prior suspicious market-making activity. On-chain analyst Elton's forensic findings referenced in support.
CryptoTimes9 June 2026
Humanity Protocol announced $1 million USDT bounty for information leading to recovery of stolen funds. Real-time exploiter wallet tracker launched and shared with exchanges.
BitcoinWorld10 June 2026
Post-mortem reporting expanded scope to approximately 447 million H tokens across all three breach vectors. Total losses revised upward to over $36 million.
CryptoTimes10 June 2026
ZachXBT updated his assessment, concluding the private key compromise and the suspicious market-making activity were 'independent of one another and not related,' effectively ruling out insider orchestration of the exploit itself.
crypto.news25 June 2026
Scheduled unlock of 266.5 million H tokens (approximately 2.7% of total supply) for vesting recipients. Represents a significant supply overhang event occurring less than three weeks after the exploit.
CoinGabbarDecision Log
- slot 457663269 · hash HNXg591AKSUcJh9F7iEpEzXbjaC4ir6wVaFZo2pHfsM5
- slot 457663098 · hash 3Y145SCFWJMYycJHsMDG9McLpyHYBv6K9KVDcrPUtd7u
- slot 426730451 · hash JCPRdQapzwj8tPPW951o6fHpyF91d65pb7Ks9Ewh7Cky
This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 16 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/15/2026, 11:04:44 PM
last updated: 10/16/2026, 2:00:27 PM
4 viewsavoid.net — verified advice for a post-truth world