Humanity founder reveals employee laptop breach behind $36M exploit

cryptonews06-09 23:52

Humanity Protocol has revealed that a compromised employee laptop enabled attackers to obtain control of bridge administration systems across Ethereum and BNB Smart Chain, resulting in the theft and ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2642449959?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-06-09 23:52","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2642449959","market":"nz","top_or_hot":-1,"title":"Humanity founder reveals employee laptop breach behind $36M exploit","media":"cryptonews","content":"<div>\n<p>Humanity Protocol has revealed that a compromised employee laptop enabled attackers to obtain control of bridge administration systems across Ethereum and BNB Smart Chain, resulting in the theft and ...</p>\n\n<a href=\"https://crypto.news/humanity-founder-reveals-employee-laptop-breach-behind-36m-exploit/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Humanity founder reveals employee laptop breach behind $36M exploit</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nHumanity founder reveals employee laptop breach behind $36M exploit\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-06-09 23:52 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/humanity-founder-reveals-employee-laptop-breach-behind-36m-exploit/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Humanity Protocol has revealed that a compromised employee laptop enabled attackers to obtain control of bridge administration systems across Ethereum and BNB Smart Chain, resulting in the theft and ...</p>\n\n<a href=\"https://crypto.news/humanity-founder-reveals-employee-laptop-breach-behind-36m-exploit/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BPI","symbol_name":"Grayscale Bitcoin Premium Income ETF","start_time":0,"source_url":"https://crypto.news/humanity-founder-reveals-employee-laptop-breach-behind-36m-exploit/","article_id":"2642449959","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/humanity-founder-reveals-employee-laptop-breach-behind-36m-exploit/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2642449959","pubTimestamp":1781020335,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"Humanity Protocol has revealed that a compromised employee laptop enabled attackers to obtain control of bridge administration systems across Ethereum and BNB Smart Chain, resulting in the theft and minting of more than $36 million worth of H tokens.Humanity Protocol says a compromised employee laptop enabled attackers to seize bridge controls and steal more than $36 million in H tokens.Attackers allegedly compromised multisig keys on Ethereum and BNB Smart Chain, draining 141.2 million H and minting 200 million additional tokens.The project has halted bridge activity, is working with exchanges and police, and plans to release a full post-mortem report.According to a statement shared with crypto.news by Humanity founder and CEO Terence Kwok, the June 8 incident was a coordinated attack that targeted the project’s bridge infrastructure on multiple networks.“Last night, June 8, 2026, the Humanity was hit by a coordinated attack across Ethereum and BSC,” Kwok said.Separate monitoring from","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"BPI":"Grayscale Bitcoin Premium Income ETF","ETHI":"Defiance Leveraged Long Income Ethereum ETF","BFAP":"FT Vest Bitcoin Strategy Floor15 ETF - April","EZET":"以太坊ETF-Franklin","MNRS":"GRAYSCALE BITCOIN MINERS ETF","ARKB":"比特币ETF-21Shares","ETCO":"Grayscale Ethereum Covered Call ETF","EETH":"以太币期货ETF-ProShares","ETHT":"ProShares Ultra Ether ETF","CBOJ":"Calamos Bitcoin Structured Alt Protection ETF - January","BKCH":"AdvisorShares Sabretooth ETF","BCCC":"Global X Bitcoin Covered Call ETF","ESK":"REX-Osprey ETH + Staking ETF","ETU":"T-Rex 2X Long Ether Daily Target ETF","YETH":"Roundhill Ether Covered Call Strategy ETF","HODL":"比特币ETF-VanEck","QETH":"以太坊ETF-Invesco Galaxy","ETHU":"2倍以太币期货ETF-Volatility Shares","CBOA":"Calamos Bitcoin Structured Alt Protection ETF - April","BTCW":"比特币ETF-Wisdom Tree","BITX":"2倍比特币期货ETF-Volatility Shares","ETHV":"以太坊ETF-VanEck","BAGY":"Amplify Bitcoin Max Income Covered Call ETF","MAXI":"比特币期货ETF-Simplify","BITY":"Amplify Bitcoin 2% Monthly Option Income ETF","CRPT":"First Trust SkyBridge Crypto Industry and Digital Economy ETF","ETHW":"以太坊ETF-Bitwise","CBXA":"Calamos Bitcoin 90 Series Structured Alt Protection ETF – April","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","ETH":"低成本以太坊ETF-Grayscale","BETE":"等权重比特币&以太币期货ETF-ProShares","BFJL":"FT Vest Bitcoin Strategy Floor15 ETF - July","ETHA":"以太坊ETF-iShares","BETH":"比特币&以太币期货ETF-ProShares","FETH":"以太币ETF-Fidelity","STCE":"Schwab Crypto Thematic ETF","CBXY":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - July","BTF":"比特币&以太币期货ETF-CoinShares","BTCC":"Grayscale Bitcoin Covered Call ETF","TETH":"21Shares Ethereum ETF","BTCI":"NEOS Bitcoin High Income ETF","GBTC":"比特币ETF-Grayscale","IBIT":"比特币ETF-iShares","ETHE":"最大以太坊ETF-Grayscale","ETHD":"ProShares UltraShort Ether ETF","SETH":"1倍做空以太币期货ETF-Proshares","FBTC":"比特币ETF-Fidelity","QBF":"Innovator Uncapped Bitcoin 20 Floor ETF - Quarterly"},"translate_title":"Humanity创始人揭露3600万美元漏洞背后的员工笔记本电脑漏洞","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"CRPT":0.7,"ETHI":0.6,"ETCO":0.6,"IBIT":0.6,"QBF":0.6,"ETHA":0.63,"BKCH":0.9,"BFAP":0.6,"ESK":0.6,"ETHU":0.63,"CBXY":0.6,"CBOJ":0.6,"GBTC":0.6,"SETH":0.6,"EZET":0.63,"ETHT":0.6,"ETU":0.63,"BETH":0.63,"QETH":0.63,"FETH":0.6,"BCCC":0.6,"FBTC":0.6,"BFJL":0.6,"ETQ":0.6,"ETHW":0.63,"ETHV":0.63,"STCE":0.7,"MAXI":0.6,"TETH":0.6,"YETH":0.63,"BITY":0.6,"EETH":0.63,"BTCI":0.6,"ETHE":0.63,"BTF":0.63,"BTCC":0.6,"ARKB":0.6,"HODL":0.6,"BPI":0.6,"CBOA":0.6,"BAGY":0.6,"CBXA":0.6,"ETH":0.73,"BTCW":0.6,"ETHD":0.63,"BETE":0.63,"BITX":0.6,"MNRS":0.6},"content_text":"Humanity Protocol has revealed that a compromised employee laptop enabled attackers to obtain control of bridge administration systems across Ethereum and BNB Smart Chain, resulting in the theft and minting of more than $36 million worth of H tokens.\n\n\nSummary\n\n\n\nHumanity Protocol says a compromised employee laptop enabled attackers to seize bridge controls and steal more than $36 million in H tokens.\nAttackers allegedly compromised multisig keys on Ethereum and BNB Smart Chain, draining 141.2 million H and minting 200 million additional tokens.\nThe project has halted bridge activity, is working with exchanges and police, and plans to release a full post-mortem report.\n\n\n\nAccording to a statement shared with crypto.news by Humanity founder and CEO Terence Kwok, the June 8 incident was a coordinated attack that targeted the project’s bridge infrastructure on multiple networks.\n“Last night, June 8, 2026, the Humanity was hit by a coordinated attack across Ethereum and BSC,” Kwok said.\nProviding the first detailed explanation of how the breach occurred, Kwok said the attacker gained access after compromising an employee device.\n\n“This was a result of a breach that happened after an employee’s laptop was compromised.”\n\nThe founder said three of the six Gnosis Safe owner keys controlling the Hyperlane bridge ProxyAdmin on Ethereum were compromised. Humanity Protocol said the attacker transferred ownership of the ProxyAdmin contract to a wallet under their control, upgraded the bridge contract to a malicious implementation, and moved approximately 141.2 million H tokens in a single transaction.\nA similar compromise took place on BNB Smart Chain. According to Humanity Protocol, three of five Safe owner keys were compromised, allowing the attacker to seize control of the bridge’s ProxyAdmin contract, deploy a malicious implementation with an unlimited mint function, and mint 200,000,005 H tokens in two separate transactions.\nThe project currently estimates that more than $36 million has been stolen and sold across both chains.\nCompromised multisig keys enabled bridge takeover\nFresh details from Humanity Protocol expand on earlier disclosures from the team, which had initially confirmed only that private keys linked to a Humanity Foundation member were compromised.\nEarlier on June 9, on-chain analyst Specter reported that more than 17 wallets associated with Humanity Protocol had been drained. Initial estimates placed losses near $19 million before later blockchain analysis increased the figure to more than $30 million.\nBlockchain data cited by Specter indicated that the attacker sold part of the stolen H tokens and converted a substantial portion of the proceeds into Ethereum. According to the analyst’s Telegram update, roughly $23.7 million had been swapped into ETH, while approximately $7.9 million remained in H tokens.\nSeparate monitoring from blockchain security firm Blockaid had previously suggested that an attacker obtained proxy administrator rights on BNB Smart Chain and minted additional H tokens.\nHumanity Protocol’s latest incident report confirms that administrative control of the bridge infrastructure was seized and used to create new tokens on the network.\nQuestions about the exploit emerged as H experienced unusual trading activity ahead of a scheduled token unlock later this month.\nAs reported by crypto.news earlier, blockchain investigator ZachXBT had initially considered whether the reported key compromise could have been used to conceal insider selling. However, after reviewing the movement and laundering of stolen funds, he concluded that the available evidence supported Humanity Protocol’s explanation that the exploit stemmed from a genuine private key compromise rather than an insider theft scheme.\nHumanity Protocol is scheduled to unlock additional tokens on June 25 under a revised investor vesting plan. Previous reporting by crypto.news showed that some early investors opted for a discounted immediate unlock instead of a longer vesting schedule.\nExchanges and police are assisting recovery efforts\nResponse efforts remain ongoing as Humanity Protocol works to contain the fallout from the attack and investigate the breach.\n“We’ve now halted all deposits and withdrawals to the affected bridges and are working with all related parties, including exchanges, to minimize the impact,” Kwok said.\nThe project said it is coordinating with exchanges and security partners while conducting an internal investigation into the incident.\n“We’re also working closely with the police to investigate this incident and recover some of the stolen funds,” Kwok added.\nMarket reaction to the exploit was severe. Trading data cited in previous reports showed H falling from its June 2 all-time high near $0.844 to around $0.123 after the attack, erasing most of the token’s earlier rally as trading volume surged above $605 million.\nDespite the losses, Kwok said the team remains focused on recovering assets, identifying those responsible, and strengthening the project’s defenses.\n\n“We’re committed to seeing this through by recovering what we can, holding those responsible accountable, and rebuilding our security from the ground up.”\n\nHumanity Protocol said it plans to release a full post-mortem report once its investigation progresses further.\n\n\n\n\n\n                Read more:\n            \n\n                Trump adviser Patrick Witt backs sweeping crypto tax bills","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.43.1","shortVersion":"4.43.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2642449959","isCrawlerRequest":true}