Humility security incident update: $36 million stolen; the company will cooperate with police investigations and efforts to recover the funds.

Odaily Odaily reports that Humility Protocol released a security incident update on the X platform, stating that its H token suffered a coordinated attack on the Ethereum and BSC chains yesterday, and it has been confirmed that more than $36 million in assets have been stolen and sold off. Preliminary investigations indicate that the incident stemmed from a compromised employee's computer, leading to the leakage of the multi-signature wallet keys controlling the Hyperlane Bridge ProxyAdmin. Specifically, the attacker obtained the private keys of three out of six holders of Gnosis Safe on the Ethereum blockchain, transferred ownership of ProxyAdmin to a wallet under their control, and escalated the bridge contract to a malicious implementation. They then transferred approximately 141.2 million H tokens in a single transaction. At the same time, the attackers also took control of the private keys of 3 out of 5 holders of the Safe wallet on the BSC chain, took over ProxyAdmin in the same way, and deployed a malicious contract with unlimited issuance capabilities to issue 200 million H tokens to their own wallet in two separate transactions. Humility stated that it has suspended all deposit and withdrawal operations for the affected bridging services and is working with exchanges and other relevant partners to minimize losses. It is also cooperating with the police investigation and attempting to recover some of the stolen funds.