Humanity Protocol has unveiled a comprehensive recovery strategy following the $36 million exploit that compromised its H token ecosystem, confirming plans to replace the affected token with a newly audited ERC-20 asset and compensate eligible holders through a 1:1 airdrop.
In an announcement posted on X, the project said it had completed its investigation into the incident and is now moving forward with a full token migration designed to restore user balances and resume network operations.
“We know the wait has been hard, and your patience through this has meant everything to us,” Humanity Protocol said. “Now that our full incident report is live, we’re ready to share the path forward.”
New ERC-20 H token deployed
As part of the recovery effort, Humanity Protocol has deployed a new audited ERC-20 smart contract on Ethereum that will replace the previous H tokens across Ethereum, BNB Chain, and Humanity Mainnet.
The team confirmed that user balances were captured through snapshots taken shortly before the exploit occurred on June 8, 2026. Snapshot blocks included Ethereum block 25,274,179, BNB Chain block 103,071,069, and Humanity Mainnet block 24,247,803.
According to the protocol, addresses linked to the attacker and related entities identified during an investigation conducted by security firm Quantstamp have been excluded from the redistribution process.
Eligible holders to receive 1:1 token airdrop
Humanity Protocol stated that eligible holders will receive the new H token on Ethereum based on balances held across all supported networks at the snapshot time.
Externally owned accounts (EOAs) will receive tokens directly, while assets held within liquidity pools and other smart contracts will be transferred to a dedicated vault pending verification and coordination with relevant stakeholders.
“The former H tokens on Ethereum, BSC, and Humanity Mainnet have been sunsetted, and a new H token is being airdropped to all existing holders,” the project said.
The migration will occur at a 1:1 ratio, ensuring users retain their pre-exploit balances.
Compensation fund created for complex cases
To address situations that cannot be resolved through the automated distribution process, Humanity Protocol has established a dedicated H Compensation Fund. The fund will support users affected by third-party protocol integrations, decentralized liquidity pool exposure, and investors who purchased H tokens after the snapshot date but continue to hold them.
The project noted that because investigators linked the exploit to DPRK-affiliated actors, claimants seeking compensation will be required to complete identity verification procedures before funds can be distributed.
A dedicated claims portal has also been launched to process compensation requests and other recovery-related cases.
Humanity mainnet relaunch scheduled
Humanity Protocol confirmed that Humanity Mainnet will relaunch in the coming weeks with the newly issued H token serving as the network’s native gas token.
The team said it is coordinating with centralized exchanges, bridge providers, liquidity partners, and ecosystem participants to ensure a smooth migration process.
Users holding H on exchanges have been advised to follow announcements from their respective trading platforms regarding token migration and support timelines.
Recovery Effort Follows $36 Million Attack
The recovery plan follows Humanity Protocol’s investigation into the exploit, which resulted in approximately $36 million in losses. According to the report, attackers gained access to sensitive credentials after successfully targeting a project director through a phishing campaign. The compromised keys enabled unauthorized control over the protocol’s BNB Chain deployment and ultimately allowed the attacker to drain funds from the ecosystem.
While the stolen assets have not been recovered, Humanity Protocol said the token migration, compensation framework, and planned network relaunch represent its primary strategy for restoring user balances and rebuilding confidence in the ecosystem.
The team also warned users to remain vigilant throughout the migration process and to rely only on verified Humanity Protocol communication channels for updates and instructions.
Also read: Drift Protocol Attack Claims Another Victim: Pyra to Terminate All Card Services
