Humanity has released an update: A total of approximately $36 million has been stolen from and sold off across both blockchains.
CoinFeed reported on June 9th that Humanity issued an update stating that its H token was subjected to a coordinated attack on Ethereum and BSC on the evening of June 8th, resulting in the theft and dumping of approximately $36 million across both chains. The project disclosed that the attack originated from a hacked employee's laptop, leading to the leakage of multiple owner keys for Gnosis Safe that controlled the Hyperlane bridge ProxyAdmin. On the Ethereum side, the attackers seized ownership of ProxyAdmin and upgraded the contract to a malicious implementation, transferring approximately 141.2 million H tokens in a single transaction. On the BSC side, after similarly gaining control of ProxyAdmin, they deployed a malicious implementation with unlimited issuance capabilities, issuing 200 million H tokens in two separate transactions and continuously dumping them.