Humanity exploit drained about $36 million after June 9 laptop compromise

CyversAlerts said its AI system flagged the attack as it unfolded after an employee’s laptop compromise exposed multisig keys and gave attackers bridge admin control.

Summary

Humanity, an identity protocol, was drained of about $36 million on June 9 after an employee’s laptop compromise exposed multisig keys, allowing attackers to gain bridge admin control. CyversAlerts said its AI system flagged the exploit as it unfolded. The incident points to a familiar crypto security failure in which compromised credentials and key management weaknesses can let attackers seize control of critical cross-chain infrastructure.

Terms & Concepts
  • multisig keys: Keys used in wallets requiring multiple approvals
  • bridge admin control: Privileged control over a cross-chain bridge system
  • identity protocol: Blockchain network focused on digital identity functions