Fact-check findings
What an automated fact-checker found when it re-read Terence Kwok — Humanity Protocol Staged Hack against the sources the page cites. Only the most recent review is shown.
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
unverifiable
1 claimNo source the reviewer could reach confirms or contradicts the claim.
- #3[unverifiable][awaiting moderator]in section: Quantstamp Investigation: DPRK Attribution
“The malware carried a digital certificate associated with South Korean software provider Hancom; Quantstamp stated that similar certificate-signing behavior appeared in prior campaigns attributed to DPRK-linked hacking groups.”
reviewerQuantstamp noted malware carried a Hancom-associated digital certificateHancom detail absent from the Crypto Briefing article; not verified in the remaining cited sources.
partially supported
3 claimsThe cited evidence supports part of the claim but not all of it.
- #1[partially supported][awaiting moderator]in section: The June 2026 Exploit
“Terence Kwok confirmed the incident publicly, stating: 'We've detected a security incident involving the compromise of private keys belonging to a member of the Humanity Foundation.'”
reviewerTerence Kwok publicly stated the quoted sentence about compromise of private keys of a Humanity Foundation memberSubstance confirmed; exact quotation wording not found in the CoinDesk article (other cited sources not fetched). - #5[partially supported][awaiting moderator]in the timeline
“Security firm Quantstamp releases its investigation findings, attributing the attack to DPRK-affiliated threat actors based on phishing methodology, malware certificate signatures, and operational patterns consistent with North Korean cyber groups.”
reviewerQuantstamp published around June 13-15 (timeline says June 13)Timeline entry states attribution flatly while the section says Quantstamp stopped short of definitive attribution; minor internal tension. Exact release date not pinned down. - #6[partially supported][awaiting moderator]in section: The June 2026 Exploit
“minted approximately 300 million additional H tokens across separate transactions”
reviewerRoughly 6 million H stolen, 141 million drained from Ethereum bridge, about 300 million minted on BNB ChainEarly CoinDesk figures differ (100M BNB mint); later reports apparently revised upward. Not resolved from fetched sources, so the 300M and 447M totals and the Safe signer thresholds are not independently confirmed.
confirmed
3 claimsThe cited evidence supports the claim as written.
- #2[confirmed][no action needed]in section: The June 2026 Exploit
“The H token's price fell from roughly $0.67 to an intraday low near $0.05”
reviewerH token price fell from about $0.67 to an intraday low near $0.05Matches CoinDesk. - #4[confirmed][no action needed]in section: Quantstamp Investigation: DPRK Attribution
“According to Quantstamp, the attack originated with a phishing email sent on June 5, 2026, impersonating South Korean crypto exchange Bithumb”
reviewerPhishing email of June 5 impersonating Bithumb to a Humanity director, with seven private keys on the machineCore Quantstamp narrative supported. The page correctly notes the director is not named by Quantstamp. - #7[confirmed][no action needed]in section: Humanity Protocol: Fundraising and Investor Background
“As of the date of this investigation, stolen funds had not been publicly confirmed as recovered.”
reviewerAs of the page date, stolen funds not recovered; mainnet to relaunch in weeksConsistent with later reporting.