Humanity Protocol: $36M theft na dem blame say hackers wey get link to North Korea
Humanity Protocol tok say say hackers wey dem dey link to North Korea knack about $36M worth tokens after attackers knack access to critical private keys through one compromised developer device. For the Quantstamp investigation, dem intruders access seven private keys wey dey for a malware-infected machine, make dem fit do “authorized” Safe transactions instead of exploiting smart contracts.
Humanity Protocol report sey the attacker get root access, control plenty production systems, and drain about 141 million H tokens from the Ethereum bridge in one transaction. More H tokens later dem mint for BNB Smart Chain, and most proceeds dem convert to ETH. The project talk sey im bridge contracts, token contracts, and Safe architecture no short-compromised—na only credentials wey dem steal.
The attribution dey supported by tooling and certificate-signing activity wey Quantstamp talk sey na the kind thing North Korean threat actors dey usually do. On-chain analysts also trace the breach to private-key compromise, though state-linked attribution still dey debated.
Market reaction quick: the H token reportedly drop 80%–90% after the details show, with small recovery later. Traders suppose treat this as reminder say operational security failures—especially key isolation—fit cause sharp liquidity and volatility shocks for tokens wey dem affect.
Bearish
Dis wan bad for H for short term because di incident na directly link to credential theft, no be only theoretical “smart contract risk.” When private keys don compromise, market dey usually re-price di token operational security immediately, wey dey lead to quick liquidity drain and volatility—as we don see before for crypto cases where Safe/admin key leaks or bridge credential exposure trigger sharp sell-offs and delayed stabilization.
For near term, traders fit expect continued pressure on H because uncertainty dey around wetin attacker go do next, how exchanges go distribute, and any additional minted or remaining funds. Even though Humanity Protocol talk say dem no compromise contracts and architecture, di fact say transactions look legitimate on-chain fit remove di “pause/stop” leverage holders normally dey expect, so e dey prolong fear.
For long term, di impact depend on remediation and transparency (key rotation, device hygiene, isolation of hot vs production keys, and independent audits). If di project fit show tightened security and credible monitoring, di selling impulse fit fade; otherwise, di credibility discount fit persist and weigh down valuation multiples compared to peers.