Humanity's H Token Hit by Coordinated Ethereum and BSC Exploit, $36M Stolen

Humanity said its H token was targeted in a coordinated attack across Ethereum and BNB Smart Chain (BSC) on the evening of June 8, with roughly $36 million in tokens stolen and sold on both networks. According to the project's incident update, the breach traced back to a compromised employee laptop, which exposed multiple owner keys for the Gnosis Safe that governs the Hyperlane bridge ProxyAdmin. On Ethereum, the attacker took ownership of the ProxyAdmin, upgraded the contract to a malicious implementation, and moved about 141.2 million H tokens in a single transaction. On BSC, after seizing control of the ProxyAdmin, the attacker deployed a malicious implementation with unlimited minting capability, minted 200 million H tokens in two transactions, and proceeded to sell the tokens. Humanity has paused deposits and withdrawals on the affected cross-chain bridge and said it is working with exchanges and law enforcement to investigate and seek recovery of part of the funds.