On the night of 8 June, something went spectacularly wrong at Humanity Protocol — a decentralised identity project that had billed itself as a biometric-powered competitor to Sam Altman’s Worldcoin. By morning, the project’s native token, $H, had crashed 90% from a high of $0.73 to a low of $0.07. Some $31.3 million in ETH and BNB had left the building. And on-chain detectives were already calling it something far more sinister than a hack.
The Official Story
Humanity Protocol founder Terence Kwok was quick to post on X. Private keys belonging to a member of the Humanity Foundation had been compromised, he said. The team was on it. Don’t interact with the bridge. Don’t touch the liquidity pools. We’re cooperating with security experts.
It was a clean, recognisable script — one we’ve seen deployed after dozens of exploits. The problem? The on-chain data doesn’t come close to supporting it.
What the Blockchain Actually Shows
On-chain analytics firm Lookonchain was among the first to document what actually happened. The attacker didn’t just steal tokens — they minted 200 million $H from nothing, via the BNB Smart Chain. Two separate tranches of 100 million each. Freshly created tokens, dumped into illiquid markets, converted into 18,510 ETH (approximately $30.8 million) and 1,548 BNB ($924,000).
Every single sale — across all nearly 300 wallets involved — was routed exclusively through decentralised exchanges (DEXs, peer-to-peer trading platforms that operate without a central operator). None of it touched a centralised venue where KYC — know your customer identity verification — requirements could slow things down.
But the detail that has really made analysts sit up is this: those nearly 300 wallets had their gas fees — the small transaction costs required to operate on blockchain networks — pre-funded from Gate.io and Bybit three weeks before the event. Three weeks. Before a supposedly unexpected hack.
On-chain researcher EmberCN dug further and found that the 300 wallets fell into two entirely distinct categories: wallets that had unlocked tokens two weeks prior, and wallets that had received tokens 11 months earlier. Two separate unlock cohorts, two separate histories, one perfectly synchronised exit. The mathematics of a single compromised private key controlling nearly 300 wallets across two entirely different token acquisition events simply does not work.
ZachXBT Smells Something
Prominent on-chain investigator ZachXBT — perhaps the closest thing crypto has to a forensic accountant with a public profile — was characteristically measured but devastating:
“The ‘incident’ seems possibly staged. I am not buying the team’s story. It’s a convenient way for the active market maker to have exited.”
In a follow-up, he noted the highly concentrated supply of $H on-chain and the fact that all selling occurred on DEX rather than CEX — “whether it’s theft or MM,” he wrote, “all H was sold on DEX vs CEX.”
A market maker, for context, is an entity paid by a project to provide liquidity — to maintain a healthy order book and prevent wild price swings. They typically hold significant token supply. If the Humanity team was working with an active market maker who decided to exit with $31 million in a single coordinated move — dressed up as a private key hack — that would be one of the more audacious exit plays in recent DeFi (decentralised finance) history.
The Project and Its Ambitions
Humanity Protocol launched with genuine ambition. It used zero-knowledge proofs — a cryptographic technique that lets you verify information without revealing the underlying data — and biometric verification to build a decentralised identity layer. The pitch: a rival to Worldcoin that didn’t require you to stare into an orb.
The $H token hit an all-time high of $0.84 as recently as 2 June — just seven days before the incident. At its pre-crash market cap, the project was valued at hundreds of millions of dollars.
As of Tuesday morning, approximately 111.36 million $H — worth roughly $14 million at current prices — remains in the attacker’s wallets. On-chain liquidity is nearly exhausted. Any further selling will move the price dramatically downward.
A Familiar Playbook
This is not the first time a DeFi project has offered a “private key compromise” narrative whilst on-chain evidence pointed to something far more coordinated. The combination of fresh token minting, DEX-only routing, and pre-positioned wallets is becoming a recognisable pattern — one that exploits the delay between official statements and community analysis to ensure the exit is fully complete before anyone pieces the picture together.
The Humanity team has not addressed the gas pre-funding timeline, the 300-wallet coordination, or the dual-cohort selling structure. Until they do, ZachXBT’s read remains the most credible one available.
The Verdict
Hack. Inside job. Market maker exit. The on-chain evidence points firmly in one direction. Terence Kwok’s explanation points in another.
The $31.3 million is gone. The $14 million overhang remains. And Humanity Protocol’s claim to be “humanity’s standard of trust” has never looked more hollow.
