A phishing email. A compromised laptop. And then $36 million gone, along with most of a project’s credibility. That is the short version of what happened to Humanity Protocol in June 2026, and the long version involves a pivot that nobody saw coming.

Humanity Protocol founder Terence Kwok confirmed the project is shifting its focus toward enterprise AI, a significant departure from its original mission as a decentralized identity platform built around Proof of Humanity. Recovery odds for the stolen funds are, in his own framing, low.

What actually happened

On June 9, 2026, attackers gained access to a developer’s private keys after a phishing email linked to Bithumb compromised a laptop on the team. That single point of failure cascaded fast.

The hackers used those keys to access the project’s Gnosis Safe multisig wallets. In English: multisig wallets are supposed to require multiple approvals before any funds move, making them harder to drain than a standard wallet. One compromised device apparently made that protection meaningless.

Approximately 141 million H tokens were drained, valued at somewhere between $30M and $36M at the time. But the attackers did not stop there. They also minted an additional 100 to 200 million tokens on the BNB Chain, effectively printing new supply out of thin air and accelerating the token’s collapse.

The H token fell 80 to 90% in price, dropping from around $0.68 to under $0.08. The market cap loss exceeded $1 billion before any partial recovery.

Investigators suspect the attack was carried out by North Korean cyber actors, a threat group increasingly linked to large-scale crypto thefts.

The response: a new token, a new direction

Humanity Protocol’s immediate reaction was to suspend its bridges and liquidity pools. The team then began issuing post-mortems and laying out a recovery plan.

The centerpiece of that plan is a token migration. The old H contract is being retired and replaced with a new, audited ERC-20 token, also called H, which will serve as the native gas token once the mainnet relaunches. Existing holders will receive an airdrop designed to partially restore the value of their holdings.

The more surprising element is the strategic pivot itself. Kwok is steering the project away from its Proof of Humanity roots and toward enterprise AI. Humanity Protocol still has backing from Animoca Brands and Polygon Labs.

The token did show some resilience. After bottoming out, H rallied roughly 41% in mid-June.

What this means for the broader market

Multisig wallets are widely regarded as a gold standard for treasury security in crypto. The idea is that no single actor controls funds. But multisig is only as strong as the operational security of the people holding the keys. If one of those people clicks the wrong email, the math stops working.

For investors, the event raises a set of questions that go beyond Humanity Protocol specifically. How are the projects in your portfolio managing key storage? Are hardware security modules in use? Is there any operational security training for team members with access to sensitive credentials?