Humanity Protocol says June 8 attack stemmed from malware on developer machine

An investigation report said the attacker obtained seven private keys after infecting one device and gaining full root access, pointing to a key-compromise rather than a protocol failure.

Summary

Humanity Protocol said its June 8 attack was caused by a key compromise after a developer machine was infected with malware. In an investigation report, the project said the attacker gained full root access to the device and obtained seven private keys. The finding suggests the breach originated from compromised operational security on a single machine rather than from a flaw in the protocol itself.

Terms & Concepts
  • private keys: Secret codes controlling crypto assets
  • root access: Highest-level control over a device
  • key compromise: Exposure or theft of secret keys