Humanity Protocol hacker moves stolen $36M crypto via stablecoins and KuCoin after phishing breach

The Humanity Protocol suffered a $36 million security breach following a phishing attack that delivered malware to a team member, granting the attacker administrative access to the protocol's systems. According to investigative findings, the attacker compromised all seven private keys from a single point of compromise—the infected machine—enabling full control over the protocol's treasury. The breach allowed the hacker to mint 141 million H tokens, simultaneously draining existing funds and inflating the token supply catastrophically.

The attacker has since initiated a coordinated fund laundering operation, moving stolen cryptocurrency through multiple wallets before converting portions into stablecoins including USDC and USDT. These stablecoins were subsequently deposited on KuCoin, a major centralized cryptocurrency exchange. The use of decentralized exchanges and wallet fragmentation suggests deliberate efforts to obscure the flow of funds and complicate recovery or forensic tracking by investigators and the affected protocol.

Humanity Protocol's response has included freezing its Ethereum contract to prevent further unauthorized transactions. However, the team faces significant recovery obstacles on BNB Smart Chain, where portions of the stolen assets remain vulnerable or beyond immediate control. The protocol has announced a recovery plan featuring a new H token airdrop and mainnet relaunch, though these measures address only partial remediation of the underlying breach. The incident underscores systemic vulnerabilities in operational security practices within decentralized finance, particularly the concentration of control over multiple private keys in a single system and the susceptibility of administrative personnel to sophisticated phishing campaigns.