Humanity Protocol Reveals Source Of Security Incident
Foundation Member's Keys at the Centre of the Attack Humanity Protocol (@Humanityprot) founder Terence Kwok (@terencekwok) has confirmed the source of a major security incident that rocked th
A
AnonymousCryptoCompass newsroom
June 9, 2026
2 min read
NEWS
CryptoCompass editorial visual for defi coverage.
Foundation Member's Keys at the Centre of the Attack
Humanity Protocol (@Humanityprot) founder Terence Kwok (@terencekwok) has confirmed the source of a major security incident that rocked the project on June 9, 2026. Kwok linked the breach to compromised private keys held by a member of the Humanity Foundation. As a precautionary measure, Kwok advised users not to interact with the bridge or any liquidity pools until the situation has been deemed safe, adding that the team was working with security experts but did not provide further details at the time.
Humanity is a zkEVM blockchain-based decentralized identity project focused on Proof of Humanity and uses privacy-preserving palm biometrics. The protocol's native $H token bore the immediate brunt of the news. Prices for the H token collapsed over 12 hours, falling 85% from around $0.70 to $0.08 at the time of writing, according to CoinGecko.
Losses Climb Past $30 Million as Attacker Converts $H to ETH
Wallets that interacted with Humanity Protocol were targeted in an ongoing exploit, with on-chain analyst Specter flagging that 17 wallets holding H tokens were drained.Losses were initially estimated at around $5 million before widening to $32 million.Out of the stolen amount, $23.7 million was swapped for Ethereum, while around $7.9 million remained in H tokens.
Arkham Intelligence also reported that the exploiter was swapping H tokens through Kyber Network and PancakeSwap, among other decentralised exchanges. The timing compounded the damage: the breach landed weeks before a scheduled June 25 token unlock.
Private key compromises have become one of the most destructive attack vectors in crypto. This type of attack is particularly difficult to prevent because it bypasses smart contract security entirely, meaning even perfectly audited code cannot protect against compromised keys. The team says it continues to work with security experts and exchange partners toward a resolution. Users are urged to avoid the protocol's bridge and liquidity pools until an official all-clear is issued.
Sparrow Wallet developer Craig Raw says his Apple Developer account has been flagged for termination after he tried to protect users from fake wallet apps on the App Store. Raw wrote that the
Europe’s path toward a possible central bank digital currency advanced again this week after the European Parliament’s Economic and Monetary Affairs Committee (ECON) backed the parliament’s p
The Ethereum Foundation’s months-long reset has moved from public debate into execution, with the organization narrowing its role around protocol stewardship, treasury discipline and the core