Humanity says $36M of H tokens were stolen and dumped in coordinated Ethereum and BSC attack

PANews, June 9 — Humanity said in an incident update that its H token was hit by a coordinated attack across Ethereum and BNB Smart Chain on the evening of June 8, with roughly $36 million worth of tokens stolen and sold. The project attributed the breach to a compromised employee laptop that exposed multiple owner keys for the Gnosis Safe governing the Hyperlane bridge ProxyAdmin. On Ethereum, the attacker took ownership of the ProxyAdmin, upgraded it to a malicious implementation, and transferred about 141.2 million H tokens in a single transaction. On BSC, the attacker similarly gained control of the ProxyAdmin, deployed a malicious implementation with infinite minting capability, minted 200 million H tokens in two transactions, and then sold the tokens on an ongoing basis.