H token jumps 44% after Humanity Protocol post-mortem

Humanity Protocol’s H token rallied as much as 44% in 24 hours after the project published a post‑mortem on a June 8 breach and outlined steps to recover lost tokens.

The report says attackers accessed private keys that had been backed up to a malware‑infected developer machine. That device contained the admin hot wallet private key and Safe signers for both Ethereum and BNB Smart Chain. The team reported the incident unfolded between June 8 and June 9.

Attackers stole about 147 million H tokens and minted roughly 300 million additional H on BNB Smart Chain, for a total impact of about 447 million H. Humanity estimated the breach at $36 million. The exploit triggered a rapid sell‑off that removed roughly $1 billion from the token’s market value and pushed the price down more than 80% within hours.

Humanity engaged external security firms to conduct a forensic investigation and said the full root cause and exact timeline remain under review. “We are still determining the full root cause of how the device was compromised and the exact timeline of when the attacker gained access,” the post‑mortem reads.

To support recovery, Humanity launched a live tracker of exploiter addresses and downstream transfers and shared it with exchanges and market aggregators. The project offered a $1 million Tether (USDT) bounty for actionable intelligence that leads to fund recovery and pledged that any recovered funds would be used for token buybacks. Humanity also said it is developing a compensation plan for affected holders.

The post‑mortem warned the attacker still controls the ProxyAdmin on the ERC‑BSC bridge and the BSC token contract, which could allow further minting on BSC if not remediated. A scheduled token unlock on June 25 could add supply to the market.

Price data showed H trading near $0.227 after the rebound, up about 44% over 24 hours, down roughly 60% on the week and about 74% below its June 2 peak of $0.844. Humanity urged anyone with relevant information to submit tips for the bounty and shared the exploiter addresses so stakeholders can follow transfers in real time.