WuShuo has learned that the Humanity Protocol investigation report confirms the June 8 attack was caused by a key leak due to a developer's machine being compromised. A colleague's device was breached by malware, granting the attacker full root access to the device. Around June 2025, during the Humanity Protocol mainnet launch, multiple private keys were accidentally backed up to this device, including the admin hot wallet private key, three ETH Safe owner keys, and three BSC Safe owner keys. Through this single point of compromise, the attacker obtained all seven keys. The report states that this incident was not due to a smart contract vulnerability—there were no vulnerabilities in the bridge, tokens, or Safe. All transfers, Safe transactions, and proxy upgrades conducted by the attacker were authorized using legitimate private keys. Humanity Protocol stated that the team is still working to confirm the full root cause of the device compromise and the exact timeline of how the attacker gained access. Previously, Humanity Protocol suffered an attack resulting in losses exceeding $31 million. https://(wublock123.com)/news/humanity-protocol-june-8-attack-key-leak-not-smart-contract-vulnerability-62540