Humanity Protocol has suffered a private key leak resulting in a loss of approximately $36 million due to a security breach on a key personnel's device. Following the incident, the price of the H token on-chain plummeted by over 90% in an instant, and the attacker is currently converting unauthorizedly minted or stolen tokens into Ethereum (ETH) to continue selling.

This incident serves as a reminder that no matter how sophisticated a protocol's technology may be, the human factor and centralized privilege management remain the weakest links. It demonstrates that the compromise of a single offline terminal or personal device can paralyze an entire ecosystem's liquidity and cause its token model to collapse.

The project team has warned users to stop using the official bridge and liquidity pools. However, some in the industry, including on-chain analyst ZachXBT, have raised doubts about the project's official explanation of a 'hacked employee laptop,' suggesting that the exact circumstances of the leak and potential flaws in internal control systems require further investigation.

This case highlights why it is crucial to evaluate not only the smart contract audits when participating in DeFi and Web3 protocols, but also the security management standards (OpSec) and the decentralization of authority among the actual operating entities.