An attacker compromised the private keys of a Humanity Protocol foundation member Monday, draining funds from 17 or more Gnosis Safe wallets across Ethereum and BNB Chain and minting an additional 100 million H tokens on BSC.
Total losses reach approximately $36 million, the project posted via its official X account. The H token fell nearly 70% over the following 24 hours.
The breach began when a foundation employee's laptop was compromised, giving the attacker access to the private keys controlling multiple Gnosis Safe multisig wallets. Armed with those keys, the attacker upgraded bridge contracts to malicious implementations and drained holdings across more than 17 wallets on both Ethereum and BNB Chain.
Private-key compromises involving multisig wallets have become one of the most damaging attack vectors in DeFi. Blockaid documented a similar attack in April 2026 when Drift Protocol lost $285 million after a privileged key compromise. In each case the attacker waited for control of enough signers to act unilaterally and then moved rapidly.
The 100 million H tokens minted on BSC carried a value of approximately $12.9 million at pre-attack prices, contributing to the $36 million aggregate loss figure.
