Cyvers: Humanity Attacked, Suspected Key Leak Grants Admin Access to Attackers

On June 9, Cyvers s reported that the authentication protocol Humanity was attacked, resulting in a loss of approximately $30 million. The root cause appears to be a leak of private keys, which granted attackers administrative access. As a result, multiple wallets controlled by the protocol on the Ethereum and BNBChain networks were emptied. After a contract upgrade, the attackers abused the minting function to create 100 million $H tokens. Subsequently, the attackers exchanged the $H tokens for $BNB and $ETH, transferring the stolen funds to multiple wallets.