Humanity Protocol Security Incident Escalates: More Than $31 Million Stolen From Related Addresses as Attacker Continues Selling H for ETH
Current public information shows the incident is still evolving rapidly. On-chain investigator ZachXBT said it is not yet possible to determine whether this was a typical external hack or whether malicious insider behavior may have been involved. Different sources have described the incident differently, and the relevant details still await official confirmation. Beyond the growing amount stolen, the on-chain sell-off has also quickly turned the incident from a pure security breach into a liquidity and market structure problem.
Based on developments disclosed so far, abnormal activity had already appeared in Humanity Protocol-related wallets at an earlier stage. Previous on-chain analysis said that more than 17 related wallets holding H were affected, with losses once exceeding $19 million; the latest monitoring now shows the scale of the theft has risen to more than $31 million. Additional follow-up on-chain reports also said the attacker minted another 1 billion H, implying the risk may not be limited to a wallet-level private key leak, but could also involve deeper permission control or token contract management issues. However, this has not yet been fully explained.
For the market, the attacker’s continued selling of H for ETH is directly increasing sell pressure on H and making any subsequent response by the project team more difficult. Key things to watch next include the scope of affected addresses, whether the token contract and related permissions have been further compromised, whether the project will implement freezing or suspension measures, and whether it will disclose a clearer attribution of the incident and a remediation plan.
## Why It Matters
The significance of this incident lies not only in the fact that losses have reached the tens of millions of dollars, but also in the fact that it simultaneously touches on on-chain security, token liquidity, and project governance. If the issue is only a single private key leak, the impact may be relatively contained; but if the reported “additional minting of H” is true, the nature of the incident could escalate from stolen assets to a token control risk, and the pricing logic in the secondary market would change accordingly.
For trading markets, the attacker’s continued conversion of H into ETH is essentially shifting the project’s native risk into public liquidity pools and trading pair depth. What the market will care more about is whether the current sell pressure comes from a one-off theft-driven dump or whether it will evolve into a longer-term loss of supply control. Because the official technical details have not yet been fully disclosed, the boundaries of the risk remain unclear.
## WEEX View
The core question is no longer simply whether funds were stolen, but whether H’s asset characteristics still hold. If only several operational or market-making addresses were compromised, then after CEX and on-chain liquidity absorb the sell-off, the market may still price it as a one-time risk event. But if the private key leak also exposes mint permissions, cross-chain bridge permissions, or failures in multisig control, then both the circulating supply and expectations around total supply for H could become distorted at the same time. Market makers would rapidly narrow their quotes and increase inventory protection, arbitrage capital would pull back, and the direct experience on the exchange side would quickly become “quotes exist, but there is no depth.”
A more immediate commercial conflict of interest is that the project team, market makers, early token holders, and secondary-market liquidity providers are no longer aligned. The project needs to stabilize the narrative and cut off permission-related risks as quickly as possible; market-making resources will prioritize protecting their own inventory; on-chain arbitrageurs will only watch for CEX/DEX price gaps to move liquidity; and whether Old Money stays in the market will depend on whether the team can provide a verifiable pause, recovery, snapshot, or restructuring plan. What is most worth watching next is not verbal explanations, but three hard indicators: whether a list of affected addresses and permissions is disclosed, whether the abnormal minting is formally confirmed, and whether major trading venues introduce deposit/withdrawal restrictions or adjust trading parameters.
## Timeline
- June 7, 2026: Humanity Protocol announced the launch of staking on Humanity Chain and introduced a reward pool of 30 million H.
- June 8, 2026: On-chain analysts reported that wallets related to or interacting with Humanity Protocol were attacked, affecting more than 17 wallets and causing losses of more than $19 million.
- June 9, 2026: Onchain Lens reported that the amount stolen from addresses linked to Humanity Protocol had exceeded $31 million, with the attacker continuously swapping H for ETH.
- June 9, 2026: Subsequent on-chain reports said the attacker minted an additional 1 billion H, suggesting the incident may have expanded from stolen assets to deeper permission control risks.
Disclaimer: This content is provided for general branding and informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online events, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets or to use any services. Crypto assets are highly volatile and may result in loss. WEEX services and online events may not be available in all regions and are subject to applicable laws, regulations, and eligibility requirements. You are responsible for ensuring that your use of WEEX services complies with local laws and for carefully assessing the risks before participating in any crypto-related activities.
You may also like

Coinhouse Reaches New Regulatory Milestone with ACPR Approval

"King of Liquidity" Dialogue: Global Liquidity Has Peaked and Is Declining, This Cycle Will Bottom Out in the Second Half of Next Year

What is VWAP? The Minute Trading

Futu Launches BNB in Hong Kong: A Comeback for Crypto Exchanges Amid Regulatory Challenges

Market Regulator Imposes Administrative Penalty on Ctrip for Abuse of Market Dominance, Total Fines of 5.179 Billion Yuan

Web3 Newsletter: Industry Highlights and Must-See Trends This Week

Goodbye Overcoat: The New Trend in Coats Taking Over This Winter 2026

From Hayek to Polymarket to TurboFlow: A Century of Evolution from Prediction Markets to Event Contracts

Goldman Sachs Cuts Argentina's Growth Forecast and Focuses on Elections

Bitcoin Policy Institute Joins Palantir and Anduril in U.S. Initiative

U.S. Commerce Secretary and Others Suspected of Advancing the Genius Act in Favor of Tether, Reports Say

World Foundation Raises 8.6 Billion Yen to Expand Human ID Infrastructure in the AI Era

Luiz Carlos Barreto, the Producer Who Helped Build Brazilian Cinema, Has Died

Colo-Colo Signs Vozinha After His Stellar Performance in the 2026 World Cup

This Week's Web3 News Recap! 【NADA Quiz Every Saturday_Vol.5】

Final Week of July Cryptocurrency | Strategy Reveals Bitcoin Holdings
![[New York Gold, Bonds, Dollar] Oil Prices Drop, US Treasury Yields Fall, Gold Prices Rise... Dollar Remains Strong](/public-static/14_1ee1df8c36.png?format=avif)
[New York Gold, Bonds, Dollar] Oil Prices Drop, US Treasury Yields Fall, Gold Prices Rise... Dollar Remains Strong

US House passes congressional stock trading ban despite loophole concerns

Strategy’s STRC tops major ETFs despite trading below $100

Is Ethereum Approaching a Bottom? Analyzing CryptoQuant's Five Bottom Signals

Kraken Brings CFTC-Regulated Perpetual Futures To US Traders

Flavio Briatore Supports Franco Colapinto After His Accident at the Hungarian Grand Prix

Prime Video Reveals Trailer for Season Three of "The Lord of the Rings: The Rings of Power"

Elliptic Report Shows How Bitcoin ATM Scams Move From Cash To On-Chain Wallets

ARCA: A small business can submit up to 89 sworn statements a year and face fines of up to $10 million

Three-Stage Negotiation: LLA Outlines Strategy to Avoid PASO Next Year

FBI used Google cookies, 500 food orders and a Monero seed phrase to identify Steam malware funder

FATF Says Crypto Travel Rule Adoption Is Rising, But Enforcement Still Lags

Coinbase reshuffles top ranks amid push into stocks and predictions






