Blockaid said the attacker took control of H token proxy admin rights on BSC and minted about $12.9 million worth of additional tokens to a new wallet.
The Humanity exploit expanded after the attacker seized proxy administrator rights for the H token on BSC and minted an additional 100 million H to a new wallet, according to Blockaid. The newly created tokens were valued at about $12.9 million. Control over a proxy admin can let an attacker alter or manage an upgradeable token contract, making it a critical point of failure in smart contract (self-executing blockchain code) systems.