Onchain analyst Specter reported that wallets linked to or previously interacting with Humanity Protocol have been compromised, with more than 17 wallets holding H tokens drained for combined losses above $19 million. Funds were traced to multiple suspected attacker addresses that have been swapping the proceeds into ETH. The root cause is still unknown, but the affected wallets appear to share a common exposure tied to Humanity Protocol.
Why it matters
The incident is the second large-scale wallet drain in the Human-network cluster this cycle, and the on-chain footprint is consistent with a project-level supply-chain compromise — a signer, a frontend, or a shared dependency — rather than individual user mistakes. Specter and Onchain Lens, two independent monitors, both flagged the activity within hours, and the attacker is moving in real time, which raises the chance that more addresses are exposed.
Market impact
H token fell more than 80% intraday as the exploit became public, with thin liquidity amplifying the move. The attacker has been routing stolen H into ETH through on-chain swaps, putting direct sell pressure on the token while the team has yet to issue a full post-mortem. Traders will be watching the next few blocks for further outflows, a project-side statement on the attack vector, and whether the address cluster expands beyond the 17 wallets already flagged.
Frequently asked questions
-
How much has been stolen from Humanity Protocol-linked wallets?
Onchain analyst Specter reported losses above $19 million across more than 17 drained wallets, while Onchain Lens monitoring put total exposure at over $31 million.
-
What caused the Humanity Protocol wallet drain?
The root cause is still unknown, but the affected wallets appear to share a common exposure tied to Humanity Protocol, suggesting a project-level compromise rather than isolated user errors.
-
How much has the H token dropped?
H token fell more than 80% intraday on the news, with thin liquidity amplifying the move as the attacker continued swapping proceeds into ETH.
-
What is the attacker doing with the stolen funds?
Funds were traced to multiple suspected attacker addresses that have been swapping the stolen H token into ETH on-chain in real time.
-
Has Humanity Protocol commented on the exploit?
As of the latest on-chain reports, the team has yet to publish a full post-mortem or identify the attack vector.
WuBlockchain