An attacker compromised a Humanity Protocol foundation member’s private keys, drained 17-plus Gnosis Safe wallets across Ethereum and BNB Chain, and minted 100 million additional H tokens on BSC. Total losses reach about $36 million. The H token fell nearly 70% on the day. On-chain investigator ZachXBT alleges the incident may have been staged.
An attacker compromised the private keys of a Humanity Protocol foundation member Monday, draining funds from 17 or more Gnosis Safe wallets across Ethereum and BNB Chain and minting an additional 100 million H tokens on BSC.
Total losses reach approximately $36 million, the project posted via its official X account. The H token fell nearly 70% over the following 24 hours.
The breach began when a foundation employee’s laptop was compromised, giving the attacker access to the private keys controlling multiple Gnosis Safe multisig wallets. Armed with those keys, the attacker upgraded bridge contracts to malicious implementations and drained holdings across more than 17 wallets on both Ethereum and BNB Chain.
Private-key compromises involving multisig wallets have become one of the most damaging attack vectors in DeFi. Blockaid documented a similar attack in April 2026 when Drift Protocol lost $285 million after a privileged key compromise. In each case the attacker waited for control of enough signers to act unilaterally and then moved rapidly.
The 100 million H tokens minted on BSC carried a value of approximately $12.9 million at pre-attack prices, contributing to the $36 million aggregate loss figure.
The Token Crash
H traded around $0.18 Monday afternoon, down roughly 70% over the preceding 24 hours, per CoinGecko. The token had traded near $0.72 before the attack and touched an intraday low near $0.057 during the heaviest selling.
Blockaid, an on-chain security firm that monitors bridge and wallet transactions in real time, flagged the suspicious activity via its official X account early Tuesday. The firm attributed the breach to compromised private keys and malicious contract upgrades across Humanity Protocol’s bridge infrastructure.
Backers and Project Background
Humanity Protocol raised backing from Animoca Brands and Polygon. The project describes itself as a Proof of Humanity blockchain verifying users’ uniqueness through decentralized identifiers and verifiable credentials, and counts more than 8 million Human IDs created, per its website.
Animoca Brands is one of the most prolific investors in Web3 gaming and infrastructure. Polygon is the network behind the POL token and one of the leading Ethereum scaling platforms. Neither has made a public statement on the incident.
