Rongchai Wang
Jun 09, 2026 03:35
Humanity Protocol suffers $30M private key compromise, crashing H token by 85%. Security concerns resurface over key management practices.
The Humanity Protocol, a zkEVM-based identity blockchain often referred to as the “Chinese Worldcoin,” has been hit by a devastating exploit. A private key compromise involving a member of the Humanity Foundation allowed attackers to drain over $30 million worth of H tokens, sending the token’s price crashing 85% within hours. H is currently trading at $0.12, down from $0.70 prior to the attack, according to CoinGecko.
Founder and CEO Terence Kwok confirmed the breach on June 8, stating on social media that the team is working with security experts to address the situation. He urged users to avoid interacting with the project’s bridge or liquidity pools until further notice. Thus far, no additional specifics about the breach or its resolution timeline have been disclosed.
Onchain analyst Specter was among the first to flag the attack, noting that wallets interacting with Humanity Protocol were being systematically drained. Blockchain intelligence firm Arkham later reported that the attacker had funneled stolen funds through decentralized exchanges such as Kyber Network and PancakeSwap. The total losses are now estimated at over $30 million.
Private Key Missteps Resurface
This isn’t the first time Humanity Protocol has faced scrutiny over private key management. In December 2025, the project admitted to a security flaw during its testnet phase, where plaintext private keys were stored in browser sessionStorage—an issue flagged by SlowMist founder Yu Xian. While the team pledged to resolve the bug promptly, no official link between that testnet vulnerability and the current exploit has been established. However, the incident highlights ongoing risks tied to operational security and private key storage practices within crypto projects.
Private key compromises have become an increasingly common attack vector across the industry. Just two months ago, the Drift Protocol suffered a $280 million exploit via compromised admin keys. According to CertiK, private key breaches were the second-most costly attack type in May 2026, with $13.7 million stolen.
H Token Market Impact
The fallout has been brutal for H token holders. After plummeting 85% to $0.08 shortly after the exploit, the token has recovered slightly to $0.12 as of June 9. Market cap estimates place the project’s value at $122 million, though trading volumes remain unclear amid the ongoing crisis.
Investors will now be watching closely for updates from Humanity Protocol regarding its remediation efforts. Security audits, private key management reforms, and clear communication will be critical to restoring confidence. However, the broader market may take longer to forget this high-profile breach.
As the crypto space continues to evolve, incidents like this serve as stark reminders of the need for robust operational security practices—especially for projects handling sensitive user data and self-sovereign identity solutions.
Image source: Shutterstock
