Humanity says compromised laptop led to $36M bridge attack

Crypto Insight Summary: Humanity Protocol disclosed that a compromised employee laptop enabled attackers to steal over $36 million worth of H tokens from its bridges on Ethereum and BNB Chain. Three of six Gnosis Safe owner multisig keys were exposed, allowing the attacker to take control of bridge administration on both networks. On Ethereum, approximately 141.2 million tokens were drained, while on BNB Chain the attacker added a function to mint 200 million tokens directly to their own wallet. Founder Terence Kwok said some multisig keys may have been accidentally backed up to a compromised device during setup, while noting that a licensed custodian and MPC secure the majority of treasury assets. The H token fell more than 85% after the disclosure, and the project halted bridge deposits and withdrawals while coordinating with exchanges on recovery. Blockchain investigator ZachXBT initially questioned whether market maker and OTC activity were linked to the exploit but later determined they appeared independent. Cyvers senior security lead Hakan Unal noted the onchain evidence is "mixed," with the patterns of a genuine compromise and a staged incident appearing similar at first. Allium Labs research lead Elton Shehdula said the pre-funding of wallets, warming up of minting authority days in advance, and simultaneous dumping across two chains suggest a coordinated operation, possibly involving an insider or an actor who held the key for an extended period. Crypto Insight Analysis: Direction: Bearish H Impact: Major Impact Horizon: Short-term (1-3 days) Reasoning: The $36M bridge attack and 85% token price drop indicate severe damage to H token's reputation and liquidity.