TLDR
- Humanity Protocol experienced a devastating security breach exceeding $30M after hackers accessed private keys from a foundation member
- The native H token plummeted between 85–90%, dropping from approximately $0.67 down to a low of $0.05
- Hackers drained a minimum of 17 wallets and minted an additional 100M H tokens on BNB Chain
- Stolen tokens were liquidated through decentralized exchanges like Kyber Network and PancakeSwap
- Private key compromises have emerged as the leading attack vector in 2026, accounting for hundreds of millions in stolen assets
On Tuesday, Humanity Protocol—a decentralized identity platform leveraging palm-scan biometric technology—fell victim to a major security breach when malicious actors obtained private keys from a Humanity Foundation team member.
CEO and founder Terence Kwok publicly acknowledged the incident, stating that the organization was coordinating with cybersecurity specialists and cryptocurrency exchange partners to mitigate the ongoing damage.
The breach compromised a minimum of 17 wallets associated with the protocol. Financial losses surpassed $32 million and continued to escalate as the situation unfolded, based on blockchain analytics data.
The perpetrator has been liquidating the stolen H tokens in exchange for ether through various decentralized trading platforms, notably Kyber Network and PancakeSwap. Blockchain forensics additionally revealed that the attacker created an extra 100 million H tokens on BNB Chain, valued at approximately $11 million, intensifying downward price pressure.
H Token Experiences Catastrophic Price Drop
The H token suffered a dramatic price collapse immediately after news of the security incident became public. Trading around $0.67 before the attack, the token plunged to approximately $0.13, momentarily bottoming at $0.05—representing an intraday crash of nearly 90%. As of this writing, H token was fluctuating between $0.08 and $0.13, reflecting a daily loss exceeding 80%.

Kwok issued an urgent advisory for users to immediately cease using the project’s cross-chain bridge and liquidity pool facilities until security protocols could be verified. The bridge infrastructure enables token transfers across different blockchain networks.
Blockchain investigator known as “Specter” observed that wallets connected to or having previously interacted with Humanity Protocol seemed to be specifically targeted in what appeared to be a coordinated ongoing assault.
Arkham Intelligence validated these estimates, documenting that the attacker had successfully extracted more than $30 million in assets and was actively liquidating the tokens.
Humanity Protocol positions itself as a competitor to Sam Altman’s Worldcoin project. The platform utilizes zero-knowledge proof cryptography combined with palm biometric authentication to enable users to verify their identity without exposing sensitive personal information, operating on a zkEVM blockchain infrastructure.
Private Key Compromises Lead Crypto Theft Statistics in 2026
The Humanity Protocol incident reflects a broader concerning trend throughout 2026. The most significant cryptocurrency thefts this year have predominantly resulted from compromised private keys rather than vulnerabilities in smart contract architecture.
This past April, Solana-based trading platform Drift sustained approximately $285 million in losses after threat actors obtained an administrative access key. During the same month, Kelp DAO experienced losses totaling roughly $292 million through a compromised single-validator bridge infrastructure, with investigators attributing that breach to North Korea’s notorious Lazarus Group.
Additional platforms victimized by key-based security breaches this year include Step Finance, Resolv, Volo Vault, Echo Bridge, Bankr, Polymarket, StablR, Stake DAO, Gravity Bridge, and Aelphium Bridge.
Cybersecurity firm CertiK documented that wallet and private key compromises ranked as the second-highest-cost attack methodology in May exclusively, with $13.7 million stolen during that single month.
The Humanity Protocol security incident remains under active investigation, with project leadership yet to announce a timeline for when the bridge infrastructure and liquidity pools will resume operations.


