Over $31 Million Stolen from Humanity, Is the Team Behind It Paving the Way for a New Project?

Odaily星球日报Publicado em 2026-06-09Última atualização em 2026-06-09

Resumo

The article reports a major security incident involving Humanity Protocol (H), resulting in over $31 million stolen. The team attributes the hack to a private key leak from a Humanity Foundation member, leading to a rapid sale of H tokens and a 90% price drop. However, prominent on-chain investigator ZachXBT suggests the event might be an "exit scam" orchestrated by the team, rather than an external hack. This suspicion is fueled by the team's controversial history, including past management failures, legal issues, and previous scandals like outsourced technology and problematic airdrops. Further investigation reveals that the core team behind Humanity is already involved with a new project called "Everything," which recently secured funding. This has led to community speculation that the alleged hack is a deliberate scheme to abandon the H project while shifting focus and resources to their new venture, leaving investors to bear the losses. The article questions whether this is a genuine security failure or a premeditated "rug pull" strategy.

Original | Odaily Planet Daily(@OdailyChina)

Author | Wenser(@wenser 2010)

When it rains, it pours. The crypto market has once again been hit by a major security incident with over $30 million in stolen funds.

In the early hours this morning, on-chain monitoring showed that the Humanity Protocol was hacked, with over 17 wallets holding H tokens compromised, resulting in total losses exceeding $19 million. Subsequently, the scale of the lost funds expanded to over $31 million. After the successful attack, the hacker quickly swapped the H tokens for ETH to facilitate subsequent money laundering.

Terence, the founder of Humanity, later confirmed that the incident was due to the private key of a Humanity Foundation member being leaked and exploited by hackers. Following this news, the price of the H token plummeted below $0.08, with a 24-hour drop of over 90%.

Against the backdrop of a minor rebound in the broader market, the "bear market staple" has played out once again. Is it hackers being unpreventable, or is there more to the story?

When a "Human-Induced Security Incident" Occurs at Humanity: Team Member Private Key Leak OR Project Team's Deliberate Plot?

According to the latest official response from Humanity, project founder Terence confirmed that the private key of a Humanity Foundation member had been leaked. As a precaution, please do not interact with cross-chain bridges or any liquidity pools until safety is confirmed. The Foundation is working with security experts and exchange partners to handle the matter and will provide ongoing updates. Furthermore, the official advises users to temporarily revoke permissions granted to the project's contract addresses until the official investigation results are disclosed.

Meanwhile, the "hack" continues. According to LookonChain monitoring, the Humanity hacker minted an additional 100 million H tokens on BSC, valued at $11.4 million, indicating that the sell-off may continue.

As of the time of writing, the address associated with the Humanity hacker holds over 31.35 million H tokens, valued at approximately $3.82 million; holds about 18,000 ETH, valued at over $30.11 million; its BNB holdings have also increased to 2,443, worth nearly $1.5 million; and it continues to mint more H tokens.

On-chain address monitoring information for the hacker can be found at: https://arkm.com/explorer/entity/dcfac174-1b67-46d6-8cab-5b8e955ca921.

Regarding this major security incident with over $30 million in stolen funds, on-chain detective ZachXBT also offered his preliminary investigation conclusions:

He first posted, "Unclear if hack or team maliciously rugged. Looking at the chart and the concentrated supply, the H team was likely working with an active market maker. However, all H tokens were sold on (on-chain) DEXs, not CEXs."

Subsequently, he gave a preliminary conclusion, stating: "This 'security incident' was likely planned. I don't believe the team's corresponding story at all; it's just an excuse made by ill-intentioned people to get away." It's worth mentioning that the Humanity project team does indeed have a "dark history."

Humanity Team's Dark History: Technical Outsourcing, Airdrop Drama, and Team Scandals

In fact, the crypto community's dissatisfaction with Humanity is not without reason.

Previously, when WorldCoin gained fame as a "human iris identity verification project," Humanity, as a "palm print verification identity security protocol," quickly capitalized on the hot concept and rose to prominence. At that time, it was highly sought after as a partner for KYC or identity verification in numerous crypto project airdrops. However, on the other hand, its background team, its promoted "palm print security verification technology," and its token airdrop process all sparked market controversy. For more details, see "From Palm Print 'Revolution' to Access Control Manufacturer, Tearing Apart Humanity's Two-Faced 'Technological' Charade."

Not only that, in June last year, on-chain investigator Specter pointed out in a post: "After understanding the team composition of Humanity, it's concerning: Among the 4 team leaders, 3 have problematic past records involving mismanagement, lawsuits, or financial irregularities."

Among them, project founder and CEO Terence Kwok has a previous "entrepreneurial history." He founded Tink Labs, which once raised $200 million and reached a peak valuation of $1.5 billion, but ultimately went bankrupt in 2019 due to "mismanagement."

Foundation head Mario Nawfal has previously been accused of withholding wages and is implicated in improper financing, false promises, and coercing whistleblowers into silence. He also has a series of "blemished histories": the project Froothie was fined in Australia for false advertising; sued by Juicero; accused of invoice manipulation during his tenure at NFT Tech; and engaged in controversial behavior with BitClout token trading.

As for Yat Siu, founder of Animoca Brands, one of Humanity's backers, he was previously involved in violations related to blockchain and crypto investments, leading to his company being delisted from the Australian Securities Exchange.

Coupled with Humanity's past incidents being exposed, such as "Shenzhen technical outsourcing," large-scale sybil attacks in token airdrops, and airdrops worth single-digit amounts for loyal users, this theft incident is hard not to be seen as having ulterior motives.

Appearing Hacked, Actually a Golden Cicada Shedding Its Shell? Humanity Team Accused of Already Shifting to a New Project

Soon, more information was revealed by the crypto community and on-chain detective ZachXBT.

After suggesting that the Humanity theft might be a planned event, ZachXBT again posted, questioning Humanity's official account: "You chose to hype your token for weeks without any real substance and think the crypto community would blindly believe your story? Please disclose all your active market-making agreements with related entities in Hong Kong first."

Subsequently, he even shared a previous tweet from crypto KOL Irene Zhao, which mentioned: "2 years ago, I made a 100x return on my KOL round investment in H tokens; now, I have also participated in the KOL round financing for Everything, a new project incubated by the Humanity team."

In January this year, Everything, which promotes the concept of an "all-in-one exchange," announced the completion of a $6.9 million seed round. The round was led by Humanity's venture capital arm, Humanity Investments, with participation from Animoca Brands, Hex Trust, WallStreetBets creator Jamie Rogozinski, and Three Point Capital. The platform emphasizes its advantage in integrating perpetual contracts, spot markets, prediction markets, and payment functions.

Looking at it now, it's a familiar taste (combining current hotspots), a familiar recipe (similar investor team composition). Often, we have to admire the keen sense and superb execution of these "entrepreneurial veterans." As for the KOLs and investors involved, perhaps all benefits have already been divided behind the scenes, leaving the losses for the token traders on stage.

Of course, in the crypto market, projects and token prices are always two sides of the same coin. As for how the H token price performs subsequently, it may still depend on the handling plan of the Humanity project team and the stage performance of the market makers.

Perguntas relacionadas

QAccording to the article, what was the official explanation given by the Humanity Protocol team for the massive security breach?

AThe official explanation, as confirmed by Humanity founder Terence, was that a private key belonging to a member of the Humanity Foundation was compromised and exploited by hackers.

QWhat was the estimated total loss from the Humanity Protocol attack as detailed in the report?

AThe estimated total loss from the attack exceeded $31 million. Initially, over 17 wallets holding H tokens were drained for over $19 million, and the scale later expanded to over $31 million.

QWho is ZachXBT and what was his preliminary conclusion about the nature of the incident?

AZachXBT is a well-known on-chain investigator. His preliminary conclusion was that the security event was likely a deliberate, man-made scheme, suggesting it was an exit strategy rather than a genuine hack.

QWhat new project is mentioned as being incubated by the Humanity team, according to the article?

AThe new project mentioned is called 'Everything', a platform described as an all-in-one exchange. It was announced in January and raised $6.9 million in seed funding, led by Humanity's venture arm, Humanity Investments.

QWhat are some of the alleged 'black histories' or past controversies associated with key members of the Humanity team mentioned in the article?

AThe article mentions several controversies: Founder Terence Kwok's previous venture Tink Labs collapsed due to mismanagement; Foundation lead Mario Nawfal allegedly had issues with unpaid wages, false promises, and questionable financial practices; and investor Yat Siu's company was delisted from the Australian Stock Exchange for irregularities in blockchain investments.

Leituras Relacionadas

WeChat Agent Issues a 'Heroic Summons,' Half of the Internet Responds

WeChat AI Agent is on the horizon. The WeChat Open Platform has issued a guide for developers, offering them ways to integrate into the WeChat AI ecosystem. This will enable mini-programs to be discovered and invoked by the AI. Meituan has already announced its integration, allowing users to access services like food delivery through WeChat AI. Other platforms like Ctrip and Tongcheng have followed suit. Furthermore, WeChat is collaborating with major smartphone manufacturers to enable their native AI assistants to perform actions within WeChat, such as initiating calls or sending messages, through a controlled protocol called Agent-to-Agent (A2A). Reports indicate the WeChat AI Agent will be accessible by swiping right on the main interface. It aims to understand user intent within the rich context of chats, groups, and past interactions, then automatically call upon relevant mini-programs to complete tasks like ordering coffee or booking restaurants. This positions it as a potential "super app" with direct access to WeChat's vast ecosystem of services, social connections, and payment systems. Technically, this is a complex endeavor. It requires advanced natural language understanding, a "world model" to predict interactions within mini-programs (UI-Oceanus), multi-model orchestration for cost efficiency, and careful coordination with millions of third-party service providers. Tencent's development follows a "Co-Design" approach, where product teams and the Hunyuan model team collaborate closely, allowing capabilities honed in other AI products (like Yuanbao for chat, ima for search, WorkBuddy for office tasks) to be transferred to the WeChat Agent. Tencent is strategically opting for the A2A protocol over GUI-based automation (which it has blocked in the past), maintaining control over its ecosystem. To manage the immense scale and cost of serving 1.4 billion monthly active users, Tencent is deepening its ties with DeepSeek, known for its cost-effective training, to secure a low-cost inference backbone. The ultimate goal is to solve practical, everyday problems for users within the WeChat ecosystem, moving beyond technical benchmarks to deliver real utility, which Tencent sees as the key to winning in the long-term AI game.

marsbitHá 1h

WeChat Agent Issues a 'Heroic Summons,' Half of the Internet Responds

marsbitHá 1h

Humanity Loses $31 Million in Attack, Token Price Plummets 90% Due to a Single Private Key

On June 9th, the digital identity project Humanity Protocol suffered a major security breach resulting in over $31 million in losses. According to on-chain analyst Specter, hundreds of wallets holding the project's H token were drained. The attack was confirmed by founder Terence Kwok to be caused by the compromise of a foundation member's private key. As a precaution, users are advised to avoid interacting with Humanity's cross-chain bridge or liquidity pools. The incident caused the H token price to crash over 90%, from around $0.70 to a low of $0.052, wiping its market cap from $2 billion to approximately $35.7 million. The attacker allegedly minted 100 million new H tokens and is selling them for BNB. This breach adds to existing controversies surrounding Humanity Protocol. Founded in 2024, it aimed to verify human users via palm-print biometrics and zero-knowledge proofs. However, a leaked conversation in 2025 revealed that only about 1 million of its 9 million claimed Human IDs had completed biometric verification, suggesting 88% might be bots. Furthermore, the project has faced allegations of being a repackaged product from a Chinese access control vendor, raising privacy and authenticity concerns. Founder Terence Kwok's previous venture, Tink Labs, a hotel smartphone startup that raised $170 million, failed and entered bankruptcy in 2020 after burning through its funding. The current attack highlights the persistent critical issue of private key management in crypto. Unlike smart contract exploits, a private key compromise bypasses all on-chain security mechanisms. With no user compensation plan announced yet, this $31 million breach may be a final blow to the project's credibility, already weakened by previous controversies and a heavily depreciated token.

marsbitHá 2h

Humanity Loses $31 Million in Attack, Token Price Plummets 90% Due to a Single Private Key

marsbitHá 2h

MicroStrategy Will Not Die in This Downturn: Reflexivity, STRC Anchoring Back to Par, and the Self-Rescue Logic of "Sell Stock, Not Bitcoin"

This article analyzes the recent sharp decline in Bitcoin and MicroStrategy (MSTR), framing it as a targeted "reflexivity" attack. The trigger was MSTR using its cash reserves to buy back convertible notes, raising market concerns about a liquidity crisis. The playbook follows George Soros's principle: market expectations can shape reality. Fears that MSTR might be forced to sell BTC caused panic selling, lowering BTC's price and worsening MSTR's financial ratios, thus reinforcing the negative narrative. The author argues that MSTR's Structured Convertible (STRC), while falling in price, is a floating-rate security that will eventually return to par value (100). The price drop reflects the market demanding a higher yield due to perceived risk, but as a floating-rate instrument, its coupon can adjust, naturally pulling the price back to par over time. This is crucial for MSTR's continued ability to raise funds. The core thesis is that MSTR's best move to counter the attack is to **issue new equity (sell shares)**, not sell its Bitcoin holdings. While selling BTC would solve the immediate cash crunch, it would destroy the company's core investment thesis and premium. It would dilute the BTC per share, likely erase the market premium over its net asset value (mNAV > 1), and worsen its debt-to-asset ratio. Issuing shares while mNAV is high (e.g., 1.25x) allows MSTR to raise cash for reserves without harming shareholder value or the "perpetual accumulation" narrative. It improves the debt ratio and reassures STRC holders, breaking the negative reflexivity cycle. In conclusion, while MSTR could survive this episode even by selling BTC, doing so would fundamentally alter its investment proposition and weaken it for future cycles. The optimal, value-preserving strategy is to sell equity to rebuild reserves and maintain the long-term growth flywheel.

marsbitHá 2h

MicroStrategy Will Not Die in This Downturn: Reflexivity, STRC Anchoring Back to Par, and the Self-Rescue Logic of "Sell Stock, Not Bitcoin"

marsbitHá 2h

Trading

Spot
Futuros
活动图片