Humanity Protocol, a decentralized identity project, said attackers stole more than US$36 million of its H token after compromising an employee laptop that stored multiple bridge admin keys.

The breach gave the attacker control of contracts on Ethereum and BNB Chain.

The project runs a decentralized identity network that uses palm biometrics and zero-knowledge proofs so users can verify attributes without exposing data.

H had a circulating supply of 2.83 billion tokens and a market capitalization of about US$563.1 million, according to CoinMarketCap.

Humanity said the breach let the attacker use three of six Ethereum multisignature wallet keys to drain about 141 million H.

The attacker also used three of five BNB Chain keys to mint about 200 million new H, or roughly 7% of the token’s circulating supply, before the project halted deposits and withdrawals on the affected bridges.

Multisignature wallets are designed to remove single points of failure, and storing multiple signer keys on one device negates the security benefits. Using hardware wallets and dedicated signing devices is standard practice.

🔗 Source: CoinDesk

Recent Humanity Protocol developments