Humanity Protocol, a biometric blockchain id challenge that had been one in every of crypto’s top-performing tokens of 2026, suffered a catastrophic safety incident on June 9 by which attackers drained roughly $32 million from greater than 17 wallets — sending the H token crashing 90% inside hours — earlier than on-chain investigator ZachXBT publicly questioned whether or not the incident was a real exterior hack or a staged exit by the challenge’s personal insiders.
The assault unfolded in two phases. Within the first, attackers minted 100 million H tokens and drained related wallets, changing roughly $23.7 million into ETH throughout a number of addresses whereas leaving roughly $7.9 million in H tokens, per on-chain knowledge flagged by Arkham Intelligence.
Within the second part, the attacker prolonged the exploit to BNB Chain — taking up the H token’s proxy admin contract and minting an extra 100 million H tokens value roughly $12.9 million to a recent pockets, per blockchain safety agency Blockaid’s on-chain monitoring of the incident.
Humanity Protocol acknowledged the breach in an official submit on X, confirming that non-public keys belonging to a member of the Humanity Foundation had been compromised. The crew urged customers to keep away from interacting with the bridge or any liquidity swimming pools till additional discover, and said that official updates would come solely from the principle account or co-founder Terence Kwok’s private account, per the @Humanityprot submit — one in every of your supplied sources.
ETH's value sees some positive aspects on the each day chart. Supply: ETHUSD on Tradingview
ZachXBT’s Three-Put up Takedown On The Crypto Hack
The incident might need handed as a standard non-public key compromise had ZachXBT not weighed in inside hours. In three posts on X the pseudonymous on-chain investigator systematically dismantled the crew’s narrative.
In his first submit, ZachXBT famous that the image was unclear — it might be a hack or a deliberate rug — however flagged that the H crew gave the impression to be working with an lively market maker given the concentrated token provide, and that each one H tokens have been bought on DEXs relatively than centralized exchanges — an uncommon sample for an exterior attacker in search of liquidity.
In his second submit, he sharpened the evaluation: “The incident seems possibly staged. I am not buying the team’s story. It’s a convenient way for the active MM to have exited.” In his third submit, he turned to the challenge’s broader credibility: “You choose to crime pump your token for weeks with zero fundamentals and think CT will blindly trust your story? Disclose your active MM agreements with the HK entity first.”
ZachXBT later walked again a few of his considerations after extra evaluation instructed the non-public key compromise and market-making points could also be unrelated — however the harm to the challenge’s credibility was already achieved.
The Context That Made ZachXBT’s Suspicions Land
The timing of the incident carries its personal weight. The H token had surged roughly 875% above its 2026 low earlier than the crash, per BanklessTimes — making it one of many yr’s most excessive performers in a sector not wanting excessive performers. A token unlock is scheduled for June 25 — two weeks away — a timeline that might make a staged exit earlier than unlock a financially rational, if prison, determination.
Three of the challenge’s 4 co-founders have documented histories involving lawsuits, monetary fraud allegations, and administration failures. Studies citing inner conversations instructed solely roughly a million of the challenge’s 9 million registered identities had accomplished biometric verification — the core metric on which Humanity’s complete worth proposition rests.
This improvement marks a important and deeply acquainted second for the nascent sector. A 90% token crash tied to a non-public key compromise that crypto’s most revered on-chain investigator publicly questions as staged — arriving weeks earlier than a significant token unlock, involving a challenge whose management carries documented crimson flags — is exactly the sample that has outlined the sector’s most damaging fraud circumstances.
Whether or not ZachXBT’s suspicions finally show appropriate will rely on on-chain proof nonetheless being gathered. What’s already clear is that $32 million is gone and the neighborhood that trusted Humanity Protocol’s id narrative is left with nothing however questions.
Cowl picture from Grok, ETHUSD chart from Tradingview
Editorial Course of for bitcoinist is centered on delivering completely researched, correct, and unbiased content material. We uphold strict sourcing requirements, and every web page undergoes diligent assessment by our crew of prime expertise specialists and seasoned editors. This course of ensures the integrity, relevance, and worth of our content material for our readers.
