Humanity Protocol's incident report traces its $36M breach to one malware-infected developer machine that stored seven private keys from its June 2025 mainnet launch.

Out of the stolen amount, $23.7 million has been swapped for Ethereum, while around $7.9 million remains in H tokens.

Humanity Protocol’s private key exploit drained up to $30 million in H tokens and crashed the price by 85% amid an ongoing attack.