Over $31 Million Stolen from Humanity, Is the Team Behind It Paving the Way for a New Project?

Odaily星球日报Publicado a 2026-06-09Actualizado a 2026-06-09

Resumen

The article reports a major security incident involving Humanity Protocol (H), resulting in over $31 million stolen. The team attributes the hack to a private key leak from a Humanity Foundation member, leading to a rapid sale of H tokens and a 90% price drop. However, prominent on-chain investigator ZachXBT suggests the event might be an "exit scam" orchestrated by the team, rather than an external hack. This suspicion is fueled by the team's controversial history, including past management failures, legal issues, and previous scandals like outsourced technology and problematic airdrops. Further investigation reveals that the core team behind Humanity is already involved with a new project called "Everything," which recently secured funding. This has led to community speculation that the alleged hack is a deliberate scheme to abandon the H project while shifting focus and resources to their new venture, leaving investors to bear the losses. The article questions whether this is a genuine security failure or a premeditated "rug pull" strategy.

Original | Odaily Planet Daily(@OdailyChina)

Author | Wenser(@wenser 2010)

When it rains, it pours. The crypto market has once again been hit by a major security incident with over $30 million in stolen funds.

In the early hours this morning, on-chain monitoring showed that the Humanity Protocol was hacked, with over 17 wallets holding H tokens compromised, resulting in total losses exceeding $19 million. Subsequently, the scale of the lost funds expanded to over $31 million. After the successful attack, the hacker quickly swapped the H tokens for ETH to facilitate subsequent money laundering.

Terence, the founder of Humanity, later confirmed that the incident was due to the private key of a Humanity Foundation member being leaked and exploited by hackers. Following this news, the price of the H token plummeted below $0.08, with a 24-hour drop of over 90%.

Against the backdrop of a minor rebound in the broader market, the "bear market staple" has played out once again. Is it hackers being unpreventable, or is there more to the story?

When a "Human-Induced Security Incident" Occurs at Humanity: Team Member Private Key Leak OR Project Team's Deliberate Plot?

According to the latest official response from Humanity, project founder Terence confirmed that the private key of a Humanity Foundation member had been leaked. As a precaution, please do not interact with cross-chain bridges or any liquidity pools until safety is confirmed. The Foundation is working with security experts and exchange partners to handle the matter and will provide ongoing updates. Furthermore, the official advises users to temporarily revoke permissions granted to the project's contract addresses until the official investigation results are disclosed.

Meanwhile, the "hack" continues. According to LookonChain monitoring, the Humanity hacker minted an additional 100 million H tokens on BSC, valued at $11.4 million, indicating that the sell-off may continue.

As of the time of writing, the address associated with the Humanity hacker holds over 31.35 million H tokens, valued at approximately $3.82 million; holds about 18,000 ETH, valued at over $30.11 million; its BNB holdings have also increased to 2,443, worth nearly $1.5 million; and it continues to mint more H tokens.

On-chain address monitoring information for the hacker can be found at: https://arkm.com/explorer/entity/dcfac174-1b67-46d6-8cab-5b8e955ca921.

Regarding this major security incident with over $30 million in stolen funds, on-chain detective ZachXBT also offered his preliminary investigation conclusions:

He first posted, "Unclear if hack or team maliciously rugged. Looking at the chart and the concentrated supply, the H team was likely working with an active market maker. However, all H tokens were sold on (on-chain) DEXs, not CEXs."

Subsequently, he gave a preliminary conclusion, stating: "This 'security incident' was likely planned. I don't believe the team's corresponding story at all; it's just an excuse made by ill-intentioned people to get away." It's worth mentioning that the Humanity project team does indeed have a "dark history."

Humanity Team's Dark History: Technical Outsourcing, Airdrop Drama, and Team Scandals

In fact, the crypto community's dissatisfaction with Humanity is not without reason.

Previously, when WorldCoin gained fame as a "human iris identity verification project," Humanity, as a "palm print verification identity security protocol," quickly capitalized on the hot concept and rose to prominence. At that time, it was highly sought after as a partner for KYC or identity verification in numerous crypto project airdrops. However, on the other hand, its background team, its promoted "palm print security verification technology," and its token airdrop process all sparked market controversy. For more details, see "From Palm Print 'Revolution' to Access Control Manufacturer, Tearing Apart Humanity's Two-Faced 'Technological' Charade."

Not only that, in June last year, on-chain investigator Specter pointed out in a post: "After understanding the team composition of Humanity, it's concerning: Among the 4 team leaders, 3 have problematic past records involving mismanagement, lawsuits, or financial irregularities."

Among them, project founder and CEO Terence Kwok has a previous "entrepreneurial history." He founded Tink Labs, which once raised $200 million and reached a peak valuation of $1.5 billion, but ultimately went bankrupt in 2019 due to "mismanagement."

Foundation head Mario Nawfal has previously been accused of withholding wages and is implicated in improper financing, false promises, and coercing whistleblowers into silence. He also has a series of "blemished histories": the project Froothie was fined in Australia for false advertising; sued by Juicero; accused of invoice manipulation during his tenure at NFT Tech; and engaged in controversial behavior with BitClout token trading.

As for Yat Siu, founder of Animoca Brands, one of Humanity's backers, he was previously involved in violations related to blockchain and crypto investments, leading to his company being delisted from the Australian Securities Exchange.

Coupled with Humanity's past incidents being exposed, such as "Shenzhen technical outsourcing," large-scale sybil attacks in token airdrops, and airdrops worth single-digit amounts for loyal users, this theft incident is hard not to be seen as having ulterior motives.

Appearing Hacked, Actually a Golden Cicada Shedding Its Shell? Humanity Team Accused of Already Shifting to a New Project

Soon, more information was revealed by the crypto community and on-chain detective ZachXBT.

After suggesting that the Humanity theft might be a planned event, ZachXBT again posted, questioning Humanity's official account: "You chose to hype your token for weeks without any real substance and think the crypto community would blindly believe your story? Please disclose all your active market-making agreements with related entities in Hong Kong first."

Subsequently, he even shared a previous tweet from crypto KOL Irene Zhao, which mentioned: "2 years ago, I made a 100x return on my KOL round investment in H tokens; now, I have also participated in the KOL round financing for Everything, a new project incubated by the Humanity team."

In January this year, Everything, which promotes the concept of an "all-in-one exchange," announced the completion of a $6.9 million seed round. The round was led by Humanity's venture capital arm, Humanity Investments, with participation from Animoca Brands, Hex Trust, WallStreetBets creator Jamie Rogozinski, and Three Point Capital. The platform emphasizes its advantage in integrating perpetual contracts, spot markets, prediction markets, and payment functions.

Looking at it now, it's a familiar taste (combining current hotspots), a familiar recipe (similar investor team composition). Often, we have to admire the keen sense and superb execution of these "entrepreneurial veterans." As for the KOLs and investors involved, perhaps all benefits have already been divided behind the scenes, leaving the losses for the token traders on stage.

Of course, in the crypto market, projects and token prices are always two sides of the same coin. As for how the H token price performs subsequently, it may still depend on the handling plan of the Humanity project team and the stage performance of the market makers.

Preguntas relacionadas

QAccording to the article, what was the official explanation given by the Humanity Protocol team for the massive security breach?

AThe official explanation, as confirmed by Humanity founder Terence, was that a private key belonging to a member of the Humanity Foundation was compromised and exploited by hackers.

QWhat was the estimated total loss from the Humanity Protocol attack as detailed in the report?

AThe estimated total loss from the attack exceeded $31 million. Initially, over 17 wallets holding H tokens were drained for over $19 million, and the scale later expanded to over $31 million.

QWho is ZachXBT and what was his preliminary conclusion about the nature of the incident?

AZachXBT is a well-known on-chain investigator. His preliminary conclusion was that the security event was likely a deliberate, man-made scheme, suggesting it was an exit strategy rather than a genuine hack.

QWhat new project is mentioned as being incubated by the Humanity team, according to the article?

AThe new project mentioned is called 'Everything', a platform described as an all-in-one exchange. It was announced in January and raised $6.9 million in seed funding, led by Humanity's venture arm, Humanity Investments.

QWhat are some of the alleged 'black histories' or past controversies associated with key members of the Humanity team mentioned in the article?

AThe article mentions several controversies: Founder Terence Kwok's previous venture Tink Labs collapsed due to mismanagement; Foundation lead Mario Nawfal allegedly had issues with unpaid wages, false promises, and questionable financial practices; and investor Yat Siu's company was delisted from the Australian Stock Exchange for irregularities in blockchain investments.

Lecturas Relacionadas

CEO de Microsoft: En la era de la IA, ¿cómo se define el foso defensivo de una empresa?

El CEO de Microsoft, Satya Nadella, sostiene que en la era de la IA, la ventaja competitiva de una empresa no radica en elegir el modelo más potente, sino en su capacidad para convertir sus flujos de trabajo, conocimientos específicos, juicio organizativo y experiencia de los empleados en un sistema de aprendizaje en constante evolución. Este "bucle de aprendizaje" es un sistema que refuerza mutuamente la experiencia humana, los procesos empresariales y las capacidades de los modelos de IA. Nadella introduce el concepto de que las empresas deben acumular dos tipos de capital: el capital humano (conocimientos, criterio, redes, creatividad de los empleados) y el "Capital Token" (capacidades de IA propias y construidas internamente). La IA no devalúa el capital humano; por el contrario, realza habilidades humanas cruciales como el establecimiento de objetivos, la conexión interdisciplinaria y el reconocimiento de patrones. Sin la dirección humana, la capacidad de cómputo no tiene rumbo. El núcleo de su argumento es que el valor de la IA no debe ser capturado por unos pocos modelos generales, sino que debe formar un ecosistema donde cada empresa, sector y país pueda poseer su propio bucle de aprendizaje. Esto requiere entornos privados de evaluación y aprendizaje por refuerzo, y bases de conocimiento consultables que transformen la experiencia tácita en capacidad sistémica reutilizable. La verdadera ventaja competitiva ("moat") no es un modelo concreto, sino el conocimiento institucional acumulado que permanece incluso si se reemplaza el modelo base, similar a la experiencia de un "empleado veterano" de la compañía. Esta es la clave de la soberanía empresarial en la era de la IA: quien pueda convertir el conocimiento organizativo en un sistema que genere rendimientos compuestos, retendrá la propiedad intelectual, amplificará las capacidades de sus empleados y mantendrá el valor económico generado por la IA dentro de su negocio, sector y comunidad. Nadella advierte contra un futuro donde unos pocos modelos capturen todo el valor, vaciando sectores enteros, y aboga por construir un "ecosistema de vanguardia" que permita una distribución amplia del valor y un equilibrio estable para la economía en general.

marsbitHace 36 min(s)

CEO de Microsoft: En la era de la IA, ¿cómo se define el foso defensivo de una empresa?

marsbitHace 36 min(s)

Respuesta del cofundador de ZEC a la vulnerabilidad de Orchard: sin rastros de robo por ahora, se cerrará el pool de Orchard

El cofundador de ZEC responde a la vulnerabilidad de Orchard: Sin rastros de robo por ahora, se cerrará el pool de Orchard Recientemente se descubrió una vulnerabilidad de seguridad en el módulo Orchard de Zcash. El equipo evaluó cuatro preguntas clave: 1. **¿Se ha explotado la vulnerabilidad?** Es poco probable. Fue descubierta proactivamente por un investigador especializado, no por una explotación. El equipo actuó rápidamente para contenerla. No hay evidencia de movimientos sospechosos típicos de un ataque. 2. **¿Se pueden recuperar los fondos legítimos en Orchard?** Sí, si la vulnerabilidad no fue explotada. En el improbable caso de que se crearan fichas falsas, el mecanismo de salida limitaría el total retirable al monto depositado originalmente. Los usuarios pueden optar por trasladar sus fondos, pero deben sopesar las implicaciones de privacidad y riesgos operativos. 3. **¿Pueden los usuarios verificar la oferta total de ZEC?** Actualmente no, debido a esta vulnerabilidad. Sin embargo, la próxima actualización de red **Ironwood** resolverá esto. Cerrará permanentemente el pool de Orchard, permitiendo solo la salida de fondos por los canales existentes, cuyo límite total es igual a los depósitos legítimos originales. Después, cualquiera podrá verificar de forma independiente que no hay inflación de la oferta. 4. **¿Hay otras vulnerabilidades de falsificación?** Tras una exhaustiva auditoría por múltiples equipos, incluyendo el uso de herramientas de IA avanzadas, no se han encontrado otras vulnerabilidades similares. Esto aumenta la confianza en que no existen fallas de este tipo sin descubrir. **Conclusión:** El riesgo de explotación es bajo, los fondos de los usuarios están seguros y no se han encontrado otras vulnerabilidades similares. La actualización Ironwood restablecerá la capacidad de los usuarios para verificar de forma independiente la oferta total de monedas, un pilar fundamental para la credibilidad a largo plazo de Zcash.

Foresight NewsHace 47 min(s)

Respuesta del cofundador de ZEC a la vulnerabilidad de Orchard: sin rastros de robo por ahora, se cerrará el pool de Orchard

Foresight NewsHace 47 min(s)

El banco central de Japón subirá los tipos pronto, ¿soportará el mercado alcista de la IA?

**TL;DR** La atención del mercado se centra en la próxima reunión del Banco de Japón (BoJ). Históricamente, el yen ha sido una moneda de financiamiento global barata, facilitando operaciones de *carry trade* (pedir prestado en yenes a bajo costo para invertir en activos de mayor rendimiento). Esto ha inflado la liquidez global y la tolerancia al riesgo, beneficiando activos de alta volatilidad como las acciones tecnológicas de IA y las criptomonedas. El BoJ está saliendo de su política de tasas ultrabajas, y se espera que suba su tasa clave al 1.0% el 16 de junio, con perspectivas de llegar al 1.25% a fin de año. Si bien 25 puntos base parecen poco, el riesgo radica en el cambio de dirección: el "dinero barato" comienza a encarecerse, lo que podría desencadenar el desapalancamiento de operaciones de carry trade. Esto forzaría a los inversores a vender activos de riesgo (como acciones de IA y cripto) para recomprar yenes, amplificando la volatilidad del mercado a través del apalancamiento y las expectativas cambiarias. El mercado no está apostando a que la suba de tasas mate el *bull market* de la IA o las cripto, cuya narrativa fundamental permanece. En cambio, está evaluando el aumento del costo global del financiamiento y la reducción de la tolerancia a pagar múltiplos de valoración elevados por crecimiento futuro. La clave a observar después del anuncio del BoJ será la correlación: si un yen más fuerte coincide con la debilidad de activos de alta beta (tecnología, criptomonedas) y un aumento de la volatilidad, será una señal de que el mapa global del "dinero barato" se está reescribiendo, elevando el umbral de financiamiento para todos los activos de riesgo.

marsbitHace 55 min(s)

El banco central de Japón subirá los tipos pronto, ¿soportará el mercado alcista de la IA?

marsbitHace 55 min(s)

Trading

Spot
Futuros
活动图片