Humanity Protocol will overhaul its operational security following a $36 million exploit in June. Founder Terence Kwok said the incident stemmed from a compromised employee laptop that gave an attacker unauthorized access to critical internal systems — a vector entirely outside the protocol's on-chain code.
The breach bypassed smart contract audits entirely, exposing a class of risk that code reviews don't catch: human and procedural vulnerabilities. Kwok tied the exploit directly to the protocol's mainnet launch period.
Attackers are increasingly targeting DeFi teams through phishing, social engineering and malware to harvest credentials, penetrate internal networks or reach deployment environments. High-value treasuries and interconnected infrastructure make protocols attractive targets at the operational perimeter, not just the contract layer.
In response, Humanity Protocol plans stricter controls on employee device access, mandatory multi-factor authentication across internal systems, network segmentation to isolate critical infrastructure, regular penetration testing of its internal IT environment and ongoing cybersecurity training for the team.
