Wallets linked to Humanity Protocol were drained for more than $32 million, and the token reportedly fell about 89% after the exploit, according to an on-chain analyst cited by The Block.
The key detail for incident forensics is what the attackers did with the loot. The Block reports that, out of the stolen amount, $23.7 million has been swapped for Ethereum. That implies the attackers moved quickly to an asset with deep liquidity and broad routing options.
Where the stolen funds went
The Block’s breakdown also shows a remaining balance. Around $7.9 million is still in H tokens, held in the implicated wallets. That split matters. Swapped proceeds tend to be harder to reverse cleanly, while unswapped balances can still be flagged in monitoring systems and potentially become the focus for any containment steps, depending on custody and exchange exposure.
Here’s the fund disposition as reported by The Block.
| Reported amount | Current state (as described by The Block) |
|---|---|
| $23.7M | Swapped for Ethereum |
| ~$7.9M | Still held in H tokens |
What the token plunge signals
The Block ties the incident to an approximately 89% token plunge. Large, fast drawdowns after a protocol exploit usually reflect two pressures hitting at once.
First, the market prices the reduced or impaired treasury and the uncertainty around recovery. Second, token holders often react to the idea that the attacker has already converted part of the stolen funds into a widely tradable asset.
Still, a price move is not proof of a specific mechanism. The only hard part in the reporting here is the on-chain destination of funds that were swapped into Ethereum and the amount left in H tokens.
What’s still unclear
The Block’s excerpt in this source text leaves out crucial forensics that readers typically want right after an exploit.
For example, it does not specify the exact exploit entry point, whether there was a single breach or multiple transactions, or which contracts and wallet flows were used. It also does not state whether any portion of the stolen Ethereum has already moved through further custody layers like mixers, bridges, or centralized exchanges.
What the $23.7 million swap does tell you is that the attacker likely prioritized monetization. Swapping to Ethereum can also complicate incident response because it broadens where those funds might be used next.
The practical next questions for monitoring
Given the reported split between swapped Ethereum and remaining H tokens, the most practical monitoring focus is straightforward.
Track the Ethereum that was received from the swaps and follow subsequent transfers. Parallel track any movement of the ~7.9 million H token balance, since it can indicate whether the attacker plans another round of conversion or attempts to re-enter liquidity.
If Humanity Protocol has any public mitigation steps or recovery plans beyond the incident reporting, those would be the next checkpoint The Block readers will likely look for. Without that, the on-chain disposition above is the most concrete snapshot available from this specific report.