Humanity Protocol’s Strategic Shift
In the wake of a significant security breach that resulted in a staggering $36 million loss, Humanity Protocol has announced a strategic shift towards developing products focused on enterprise artificial intelligence. This pivot comes as the company was already contemplating its long-term objectives. Terence Kwok, the founder of Humanity Protocol, mentioned in a recent interview that the discussions surrounding this transition had been ongoing for several months, but the June exploit hastened the decision-making process.
Focus on Enterprise AI
Traditionally recognized as a blockchain identity platform, Humanity Protocol is now set to concentrate on creating solutions tailored for the enterprise AI sector. While digital identity remains a crucial component of Humanity Protocol’s offerings—especially as verification methods become even more essential for AI systems—the company aims to roll out various solutions specifically aimed at AI enterprises.
Earlier, Humanity Protocol developed a proof-of-personhood blockchain that supported various credentials, such as employment verification and credit assessments, even collaborating with Mastercard for proof-of-assets applications. The platform has managed to attract roughly 10 million users, with millions having completed their credentials, according to Kwok.
Challenges and Recovery Efforts
The strategic redirection follows one of Humanity Protocol’s most challenging moments. The exploit saw the theft of approximately $36 million worth of funds when attackers gained access to critical private keys, resulting in a collapse of the H token’s value and pushing the project into recovery. Kwok acknowledged the slim chances of recovering the stolen assets, likening the situation to that of Bybit, which faced difficulties in retrieving about $1.4 billion in ether lost during a separate attack last year.
As part of its recovery efforts, Humanity Protocol has distributed a replacement token and is engaged in ongoing discussions regarding snapshot dates, liquidity pools, and custodial arrangements. Investigators are working diligently to track all transactions that occurred post-breach to facilitate the claims for compensation. Law enforcement from various regions, including Hong Kong and the United States, has also been enlisted to aid in the ongoing investigation.
Investigation Findings
Preliminary findings from a joint investigation by Humanity Protocol and cybersecurity firm Quantstamp indicated that the exploitation originated from compromised private keys on a developer’s device, rather than flaws within the smart contracts themselves.
The June incident revealed that malware had infiltrated a developer machine containing sensitive key backups, which allowed attackers to conduct seemingly legitimate transactions, resulting in the draining of approximately 141 million H tokens from the Ethereum bridge, followed by unauthorized token minting on the BNB Smart Chain. Notably, the attack displayed signatures typically linked to North Korean cyber threat actors.
Impact of the Breach
The aftermath was swift, with the value of the H token plummeting nearly 89% within hours, leading to on-chain analyst estimates of over $32 million in losses at the time. However, Kwok reported that the company’s monitoring systems quickly flagged unusual token movements after the breach was detected, although it took several days of forensic analysis to ascertain the full impact of the incident.
