The H token from Humanity Protocol collapsed 88% in a single day after a private key breach drained more than $30 million from over 17 wallets. The token hit an intraday low near $0.072 — its weakest level since mid-December 2025. On-chain analyst Specter spotted the attack first, flagging a string of wallets that were emptied and the attacker swapping stolen H for Ethereum.
How the attack unfolded
Private keys held by a member of the Humanity Foundation were compromised, founder Terence Kwok confirmed. The attacker used those keys to access at least 17 wallets and began offloading the token in bulk. Initial losses were pegged around $5 million, but the total ballooned past $30 million as the market reacted. Kwok said the project is working with security experts and exchange partners to contain the fallout.
The five known theft addresses
Specter published a list of addresses tied to the exploit. They are: 0x456Cb73b35022E4B524e5510807776453d984AeF, 0xee4B6B8967Aa947ac3aEf540eE07ea6099C566F7, 0xAf2a4989922299EB14A29E332dad1012A8aaD3A0, 0x1dfe5cF3ED5a0AC82FDD0bFCdaC7B6C6323f844a, and 0xD1ea823D421E0c829ee11F772AF487fd352678EA. These addresses are now being tracked by the project's security partners.
A token unlock looms
The timing isn't great. A scheduled token unlock is set for June 25. That event was already drawing attention from traders watching supply dynamics. Now the team has to stabilize a token that just lost most of its value while dealing with an active security incident. Kwok did not say whether the unlock would be delayed or canceled.
What happens next
Right now the focus is on freezing any remaining exposure and working with exchanges to block the attacker from cashing out more proceeds. The five linked addresses are under watch. Whether the June 25 unlock proceeds as planned is a question the Humanity Foundation will have to answer in the coming days.
