BlockBeats report: On June 9, Humanity released an update on the $31 million attack. To date, over $36 million in tokens on Ethereum and BNB Chain have been stolen and sold. The incident originated from a compromised employee laptop, resulting in the exposure of three out of six owner keys for the Gnosis Safe controlling the Hyperlane bridge’s ProxyAdmin. The attacker used these keys to transfer ownership of the ProxyAdmin to their own wallet, then maliciously upgraded the bridge contract, stealing approximately 141.2 million H tokens in a single transaction. Three out of five BNB Chain Safe owner keys were also compromised. The attacker performed the same operation on BNB Chain, deploying a malicious implementation with infinite minting capabilities, and minted 200 million H tokens directly to their wallet in two batches.
Humanity stated that it has suspended deposits and withdrawals on all affected cross-chain platforms and is working with all relevant parties to minimize losses. In addition to its internal investigation, Humanity said it is closely cooperating with law enforcement to investigate the incident and recover some of the stolen funds.