Humanity Protocol said hackers stole more than $36 million in H tokens by compromising an employee's laptop that held multiple bridge admin keys. The decentralized identity project has halted bridge activity and is working with law enforcement.
The breach occurred when the laptop stored several keys for multisignature wallets controlling token bridges on Ethereum and BNB Chain. Attackers used three of six Ethereum keys and three of five BNB Chain keys to seize control, deploy malicious code, and drain or mint tokens. Humanity Protocol founder Terence Kwok said the keys were accidentally backed up to the compromised device during setup. The project has removed its team page from its website and urged users to avoid affected bridges and liquidity pools. The H token fell as low as about 5 cents during the incident before recovering to around 20 cents. It remains well below the pre-breach level of 67 cents. Humanity raised $20 million from Pantera Capital and Jump Crypto last year at a $1.1 billion valuation.