Over $31 Million Stolen from Humanity, Is the Team Behind It Paving the Way for a New Project?

Odaily星球日报Опубліковано о 2026-06-09Востаннє оновлено о 2026-06-09

Анотація

The article reports a major security incident involving Humanity Protocol (H), resulting in over $31 million stolen. The team attributes the hack to a private key leak from a Humanity Foundation member, leading to a rapid sale of H tokens and a 90% price drop. However, prominent on-chain investigator ZachXBT suggests the event might be an "exit scam" orchestrated by the team, rather than an external hack. This suspicion is fueled by the team's controversial history, including past management failures, legal issues, and previous scandals like outsourced technology and problematic airdrops. Further investigation reveals that the core team behind Humanity is already involved with a new project called "Everything," which recently secured funding. This has led to community speculation that the alleged hack is a deliberate scheme to abandon the H project while shifting focus and resources to their new venture, leaving investors to bear the losses. The article questions whether this is a genuine security failure or a premeditated "rug pull" strategy.

Original | Odaily Planet Daily(@OdailyChina)

Author | Wenser(@wenser 2010)

When it rains, it pours. The crypto market has once again been hit by a major security incident with over $30 million in stolen funds.

In the early hours this morning, on-chain monitoring showed that the Humanity Protocol was hacked, with over 17 wallets holding H tokens compromised, resulting in total losses exceeding $19 million. Subsequently, the scale of the lost funds expanded to over $31 million. After the successful attack, the hacker quickly swapped the H tokens for ETH to facilitate subsequent money laundering.

Terence, the founder of Humanity, later confirmed that the incident was due to the private key of a Humanity Foundation member being leaked and exploited by hackers. Following this news, the price of the H token plummeted below $0.08, with a 24-hour drop of over 90%.

Against the backdrop of a minor rebound in the broader market, the "bear market staple" has played out once again. Is it hackers being unpreventable, or is there more to the story?

When a "Human-Induced Security Incident" Occurs at Humanity: Team Member Private Key Leak OR Project Team's Deliberate Plot?

According to the latest official response from Humanity, project founder Terence confirmed that the private key of a Humanity Foundation member had been leaked. As a precaution, please do not interact with cross-chain bridges or any liquidity pools until safety is confirmed. The Foundation is working with security experts and exchange partners to handle the matter and will provide ongoing updates. Furthermore, the official advises users to temporarily revoke permissions granted to the project's contract addresses until the official investigation results are disclosed.

Meanwhile, the "hack" continues. According to LookonChain monitoring, the Humanity hacker minted an additional 100 million H tokens on BSC, valued at $11.4 million, indicating that the sell-off may continue.

As of the time of writing, the address associated with the Humanity hacker holds over 31.35 million H tokens, valued at approximately $3.82 million; holds about 18,000 ETH, valued at over $30.11 million; its BNB holdings have also increased to 2,443, worth nearly $1.5 million; and it continues to mint more H tokens.

On-chain address monitoring information for the hacker can be found at: https://arkm.com/explorer/entity/dcfac174-1b67-46d6-8cab-5b8e955ca921.

Regarding this major security incident with over $30 million in stolen funds, on-chain detective ZachXBT also offered his preliminary investigation conclusions:

He first posted, "Unclear if hack or team maliciously rugged. Looking at the chart and the concentrated supply, the H team was likely working with an active market maker. However, all H tokens were sold on (on-chain) DEXs, not CEXs."

Subsequently, he gave a preliminary conclusion, stating: "This 'security incident' was likely planned. I don't believe the team's corresponding story at all; it's just an excuse made by ill-intentioned people to get away." It's worth mentioning that the Humanity project team does indeed have a "dark history."

Humanity Team's Dark History: Technical Outsourcing, Airdrop Drama, and Team Scandals

In fact, the crypto community's dissatisfaction with Humanity is not without reason.

Previously, when WorldCoin gained fame as a "human iris identity verification project," Humanity, as a "palm print verification identity security protocol," quickly capitalized on the hot concept and rose to prominence. At that time, it was highly sought after as a partner for KYC or identity verification in numerous crypto project airdrops. However, on the other hand, its background team, its promoted "palm print security verification technology," and its token airdrop process all sparked market controversy. For more details, see "From Palm Print 'Revolution' to Access Control Manufacturer, Tearing Apart Humanity's Two-Faced 'Technological' Charade."

Not only that, in June last year, on-chain investigator Specter pointed out in a post: "After understanding the team composition of Humanity, it's concerning: Among the 4 team leaders, 3 have problematic past records involving mismanagement, lawsuits, or financial irregularities."

Among them, project founder and CEO Terence Kwok has a previous "entrepreneurial history." He founded Tink Labs, which once raised $200 million and reached a peak valuation of $1.5 billion, but ultimately went bankrupt in 2019 due to "mismanagement."

Foundation head Mario Nawfal has previously been accused of withholding wages and is implicated in improper financing, false promises, and coercing whistleblowers into silence. He also has a series of "blemished histories": the project Froothie was fined in Australia for false advertising; sued by Juicero; accused of invoice manipulation during his tenure at NFT Tech; and engaged in controversial behavior with BitClout token trading.

As for Yat Siu, founder of Animoca Brands, one of Humanity's backers, he was previously involved in violations related to blockchain and crypto investments, leading to his company being delisted from the Australian Securities Exchange.

Coupled with Humanity's past incidents being exposed, such as "Shenzhen technical outsourcing," large-scale sybil attacks in token airdrops, and airdrops worth single-digit amounts for loyal users, this theft incident is hard not to be seen as having ulterior motives.

Appearing Hacked, Actually a Golden Cicada Shedding Its Shell? Humanity Team Accused of Already Shifting to a New Project

Soon, more information was revealed by the crypto community and on-chain detective ZachXBT.

After suggesting that the Humanity theft might be a planned event, ZachXBT again posted, questioning Humanity's official account: "You chose to hype your token for weeks without any real substance and think the crypto community would blindly believe your story? Please disclose all your active market-making agreements with related entities in Hong Kong first."

Subsequently, he even shared a previous tweet from crypto KOL Irene Zhao, which mentioned: "2 years ago, I made a 100x return on my KOL round investment in H tokens; now, I have also participated in the KOL round financing for Everything, a new project incubated by the Humanity team."

In January this year, Everything, which promotes the concept of an "all-in-one exchange," announced the completion of a $6.9 million seed round. The round was led by Humanity's venture capital arm, Humanity Investments, with participation from Animoca Brands, Hex Trust, WallStreetBets creator Jamie Rogozinski, and Three Point Capital. The platform emphasizes its advantage in integrating perpetual contracts, spot markets, prediction markets, and payment functions.

Looking at it now, it's a familiar taste (combining current hotspots), a familiar recipe (similar investor team composition). Often, we have to admire the keen sense and superb execution of these "entrepreneurial veterans." As for the KOLs and investors involved, perhaps all benefits have already been divided behind the scenes, leaving the losses for the token traders on stage.

Of course, in the crypto market, projects and token prices are always two sides of the same coin. As for how the H token price performs subsequently, it may still depend on the handling plan of the Humanity project team and the stage performance of the market makers.

Пов'язані питання

QAccording to the article, what was the official explanation given by the Humanity Protocol team for the massive security breach?

AThe official explanation, as confirmed by Humanity founder Terence, was that a private key belonging to a member of the Humanity Foundation was compromised and exploited by hackers.

QWhat was the estimated total loss from the Humanity Protocol attack as detailed in the report?

AThe estimated total loss from the attack exceeded $31 million. Initially, over 17 wallets holding H tokens were drained for over $19 million, and the scale later expanded to over $31 million.

QWho is ZachXBT and what was his preliminary conclusion about the nature of the incident?

AZachXBT is a well-known on-chain investigator. His preliminary conclusion was that the security event was likely a deliberate, man-made scheme, suggesting it was an exit strategy rather than a genuine hack.

QWhat new project is mentioned as being incubated by the Humanity team, according to the article?

AThe new project mentioned is called 'Everything', a platform described as an all-in-one exchange. It was announced in January and raised $6.9 million in seed funding, led by Humanity's venture arm, Humanity Investments.

QWhat are some of the alleged 'black histories' or past controversies associated with key members of the Humanity team mentioned in the article?

AThe article mentions several controversies: Founder Terence Kwok's previous venture Tink Labs collapsed due to mismanagement; Foundation lead Mario Nawfal allegedly had issues with unpaid wages, false promises, and questionable financial practices; and investor Yat Siu's company was delisted from the Australian Stock Exchange for irregularities in blockchain investments.

Пов'язані матеріали

human.tech Launches Clean SDK for Privacy-First Web3 Apps

human.tech has launched the Clean SDK, a toolkit enabling developers to build privacy-first Web3 applications with transparent accountability. Released alongside Aztec's version 5, the SDK provides components for integrating zero-knowledge identity verification, sanctions screening, and private transactions, without developers handling sensitive user data or building compliance infrastructure from scratch. It uses zero-knowledge proofs and programmable verification to allow apps to confirm user legitimacy and sanctions compliance while keeping identities confidential. The first application built on the SDK, Shield, a privacy bridge to Aztec, also launched. It allows users to transfer assets privately while proving a unique human is behind each transfer and that funds have passed sanctions checks, as verified by a May 2026 audit. The SDK offers three core verification techniques: Proof of Innocence (sanctions screening against 23 sources), Proof of Personhood (simpler verification via Human Passport), and Proof of Clean Hands (higher-assurance zero-knowledge government ID checks). This allows apps to authenticate users and transactions without exposing personal data. Designed for Aztec builders, the SDK lets developers add programmable privacy to decentralized apps, eliminating the need to create their own verification and ZK infrastructure. Shield demonstrates its practical use for private bridges, but the SDK aims to enable a wider ecosystem of private, accountable financial apps and services. The launch addresses growing demand for infrastructure that balances privacy and accountability. The SDK avoids traditional identity databases, storing encrypted data off-chain, screening at both entry and exit points, and including a gated disclosure mechanism for legal requests. human.tech's products, including the Clean SDK, focus on using zero-knowledge technology to enable verifiable personhood and privacy in digital systems.

TheNewsCrypto29 хв тому

human.tech Launches Clean SDK for Privacy-First Web3 Apps

TheNewsCrypto29 хв тому

Unlocking $100 Million in Liquidity? Pump.fun's New Policy Tests the 5-Minute Pump Technique

Pump.fun, a popular meme coin launchpad, has introduced a new standard mechanism called BOOST. It aims to address a significant capital efficiency issue: when a newly launched token graduates from its initial bonding curve to a liquidity pool (LP), roughly 20% of its liquidity becomes permanently locked as "dead liquidity," estimated to waste over $100 million annually. Instead of locking these funds permanently, BOOST repurposes them. Upon a token's migration, approximately 20% of the settlement funds (e.g., 17.6 SOL or ~$2516 USDC) are used to buy back the token on the open market over a 5-minute period via a Time-Weighted Average Price (TWAP) mechanism. All purchased tokens are immediately burned. This creates a brief, systematic buy pressure immediately after migration, potentially generating a short-term price surge ("pump") while permanently reducing the token's circulating supply. The goal is to enhance the immediate post-launch trading experience, potentially increasing trader retention and sustainable protocol revenue, which funds ongoing token buybacks. However, concerns exist that this artificial 5-minute boost could lower the barrier for launching low-quality tokens and lead to steeper price crashes once the buy pressure stops, if followed by large sell-offs. The feature automatically applies to tokens migrating after July 21, 2024, but not to previously migrated tokens or those launched via the Mayhem AI Agent lab.

marsbit36 хв тому

Unlocking $100 Million in Liquidity? Pump.fun's New Policy Tests the 5-Minute Pump Technique

marsbit36 хв тому

Podcast Notes | Conversation with GSR Asset Management Head: To Determine if This Crypto Rally is Real, Just Watch the Lending Rates on Aave

Podcast Summary: Dialogue with GSR's Head of Asset Management: To Determine if This Crypto Rally is Real, Just Check Lending Rates on Aave Andy Baehr, Managing Director of Asset Management at GSR, discusses the current crypto market, characterizing it as stuck in a state of "ambivalence" with short-lived, unsustainable rallies. He outlines a simple framework: the market moves between "ambivalence" and "conviction" (sustained upward momentum). Currently, every rally resembles a single-stage rocket booster that quickly fizzles out. Baehr identifies three key signals to watch: 1) DeFi lending rates, 2) the potential passage of the CLARITY Act, and 3) the market forming a consensus on the "Fed hawkish peak." He emphasizes that the most immediate indicator for the sustainability of the recent CPI-triggered rally is the USDC borrowing rate on Aave, currently around 3.75%—close to U.S. Treasury yields. The absence of a credit spread indicates low leverage demand and a lack of market energy. He explains that a healthy, sustained rally requires layered buying pressure. Last year's rally progressed from an ETH short squeeze to crypto-native trader influx and finally to ETF inflows. Currently, this structure is missing. Other potential structural buyers like Digital Asset Treasury (DAT) companies are absent, and ETF flows have proven transient. Baehr notes that while small-cap crypto tokens outperformed large caps in Q2—a potential sign of capitation in major assets—capital is also flowing to more exciting opportunities like AI stocks and tech IPOs, leaving crypto sidelined. Regarding DeFi, he highlights that platforms like Aave provide a clear, real-time signal of leverage demand through their supply/demand-driven interest rates. A significant, sustained rate increase would signal genuine market conviction. He also observes the quiet emergence of fixed-income-like products and vaults in DeFi. On regulation, the probability of the CLARITY Act passing before the August 7th deadline has dropped linearly from 75% to below 40% on Polymarket. Baehr suggests its passage would be treated as a bullish surprise, a potent driver for price movement. However, political hurdles, including ethical clause debates and disclosures about the First Family's crypto profits, remain significant obstacles. Ultimately, the market awaits clarity on the Fed's terminal rate under Chair Warsh. Until the "Fed Solstice"—the point where the market collectively understands the peak of hawkish policy—sustained conviction will be difficult to achieve.

marsbit1 год тому

Podcast Notes | Conversation with GSR Asset Management Head: To Determine if This Crypto Rally is Real, Just Watch the Lending Rates on Aave

marsbit1 год тому

Торгівля

Спот
活动图片