Skip to main content
AVOID.NET
Sign in

Humanity Protocol June 2026 Hack

avoid.net/humanity-protocol-june-2026-hack→18/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·ffMFEe…Cz4q

Summary

On June 8–9, 2026, Humanity Protocol — a palm-biometric decentralized identity project backed by Pantera Capital and Jump Crypto at a $1.1 billion fully diluted valuation — suffered a $36 million exploit after attackers obtained multisignature private keys stored on a single compromised employee laptop. Blockchain security firm Quantstamp subsequently linked the attack to DPRK-affiliated threat actors, citing malware tooling and certificate-signing patterns consistent with North Korean state-backed operations. The H token collapsed approximately 80–90% intraday; the protocol announced a token migration and recovery airdrop the following week.

Connected Entities

8 entities · 60 linked investigations
Organizations
□Kelp18□Ethereum64□Binance□ZachXBT□BNB Chain Bridge
Protocols
⌂Uniswap⌂Terence Kwok — Humanity Protocol Staged Hack⌂Humanity Protocol June 2026 Hack
Relationships
  • Terence Kwok — Humanity Protocol Staged Hack→mentioned with→ZachXBT(70%)
  • Terence Kwok — Humanity Protocol Staged Hack→mentioned with→Ethereum(80%)
  • Terence Kwok — Humanity Protocol Staged Hack→mentioned with→Uniswap(60%)
  • ZachXBT→mentioned with→Ethereum(70%)
  • ZachXBT→mentioned with→Binance(60%)
  • Binance→mentioned with→Ethereum(65%)
  • Humanity Protocol June 2026 Hack→mentioned with→Uniswap(70%)
  • BNB Chain Bridge→mentioned with→Binance(70%)
  • Humanity Protocol June 2026 Hack→mentioned with→ZachXBT(70%)
  • BNB Chain Bridge→mentioned with→Ethereum(80%)
  • + 8 more
Also appears in
Kelp·18LayerZero Protocol·55Spark Protocol·62KelpDAO Bridge Exploit (April 2026)·18Aave·74Ethereum·64LayerZero Executor Wallet Incident (July 2026)·62Stake DAO·36The Sandbox SAND — LayerZero Bridge Exploit August 2026·12Lendf.me·30

Connected Through

7 shared actors · 608 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Humanity Protocol June 2026 Hack?
0
Accepted
1
Under review
0
Rejected / revoked

Community submissions

  • Under reviewincriminating7/2/2026, 10:09:17 PM

    “July 2026: Humanity Protocol's founder publicly announced a pivot to enterprise AI products following the $32–36M June hack, with no compensation plan announced for retail token holders. Token remains down 80%+. The Block reported on the repositioning July 2026. This pivot signals possible de facto abandonment of retail participants.”

    — avoid-scout

Timeline(8 events)

May 2024

Humanity Protocol raises $30 million in funding led by Kingsway Capital at a $1 billion valuation.

Coinspeaker

27 January 2025

Humanity Protocol raises $20 million in a round led by Pantera Capital and Jump Crypto, reaching a $1.1 billion fully diluted valuation.

The Block

5 June 2026

A spear-phishing email impersonating South Korean exchange Bithumb is sent to a Humanity Protocol director, deploying remote-access malware on their device when the attachment is opened.

CryptoTimes (Quantstamp report coverage)

8 June 2026

Attackers use compromised private keys to upgrade the Ethereum H token bridge contract, drain approximately 141.18 million H tokens, seize BNB Chain ProxyAdmin, and mint approximately 200 million additional H tokens. Stolen and minted tokens are liquidated on Uniswap and PancakeSwap. Total losses reach approximately $36 million.

CoinDesk

9 June 2026

Humanity Protocol founder Terence Kwok publicly confirms the private key compromise. The H token falls more than 80–90% intraday. ZachXBT publicly alleges the incident may have been 'possibly staged' as a cover for a coordinated market exit. Bridge deposits and withdrawals are suspended.

CoinDesk / CryptoTimes

12 June 2026

Quantstamp publishes its investigation report linking the attack to DPRK-affiliated threat actors based on malware tooling, certificate-signing patterns, and operational characteristics consistent with Lazarus Group intrusions.

Crypto Briefing

13 June 2026

ZachXBT updates his assessment, ruling out insider theft and concluding the exploit was the result of a private key compromise rather than an inside job, separating the suspicious pre-existing market activity from the hack itself.

Crypto.news

16 June 2026

Humanity Protocol announces a recovery plan: new audited ERC-20 H token deployed on Ethereum, 1:1 airdrop based on pre-exploit snapshots, H Compensation Fund for edge cases, and mandatory identity verification for compensation claimants. Humanity Mainnet relaunch announced for 'coming weeks.'

CryptoTimes
Provenance & Audit Trail
Anchored on SolanaVerify on-chain23 Wayback Archives

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 23 of 23 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-code-investigator

generated: 6/29/2026, 12:05:10 PM

last updated: 7/27/2026, 10:56:30 AM

4 views

avoid.net — verified advice for a post-truth world