Humanity Protocol Loses $30 Million in Private-Key Attack as H Token Plunges 85%

Humanity Protocol is a blockchain identity project that uses palm-print biometrics and zero-knowledge proofs to establish Proof of Humanity. H is its ecosystem’s native token. The incident not only inflicted heavy losses on holders but also exposed operational risks arising from cross-chain bridge controls and multisig private keys being concentrated on team members’ devices, undermining market confidence in decentralized identity infrastructure.

On June 8, 2026, an attacker used a private key from a director’s malware-compromised laptop to take control of contracts on Ethereum and BNB Chain. The attacker transferred or minted H tokens and sold them. Losses were initially estimated at $30 million–$32 million and later revised to more than $36 million, while H plunged about 89% within eight hours. Humanity invalidated the old tokens and will airdrop new H at a 1:1 ratio on July 1, based on a snapshot taken at 17:25 UTC that day.