Humanity: Over $36 million in tokens have been stolen and dumped, with the attack stemming from an employee's compromised laptop.

June 9 — The crypto project Humanity has issued an update on its recent security breach, disclosing that more than $36 million in tokens on Ethereum and BNB Chain have been stolen and sold off. The attack originated from a breach of an employee’s laptop, which compromised three out of six Gnosis Safe owner keys linked to the Hyperlane Bridge ProxyAdmin. Using these compromised keys, the attacker transferred ownership of the ProxyAdmin to their own wallet, then maliciously upgraded the bridge contract to siphon approximately 1.412 billion H tokens in a single transaction. On the BNB Chain, three of five Gnosis Safe owner keys were similarly breached. The attacker repeated their scheme here: they deployed a malicious smart contract implementation with an infinite mint function, then minted 2 billion H tokens directly to their wallet across two separate batches. In response, Humanity has temporarily suspended all deposits and withdrawals on the affected cross-chain platforms. The project is working with all relevant stakeholders to mitigate losses, alongside conducting an internal investigation and collaborating closely with law enforcement to probe the incident and recover stolen funds.