Terence Kwok — Humanity Protocol Staged Hack
Summary
Terence Kwok is the founder of Humanity Protocol, a biometric decentralized identity project that raised $50 million from investors including Pantera Capital and Jump Crypto at a $1.1 billion valuation. On June 8–9, 2026, the project suffered a breach in which approximately $36 million was stolen via compromised private keys, causing the H token to crash 80–90%. On-chain investigator ZachXBT publicly characterized the incident as 'possibly staged,' citing pre-funded attacker wallets and a pattern consistent with a market-maker exit, though a subsequent investigation by security firm Quantstamp attributed the attack to DPRK-affiliated threat actors using a phishing campaign.
Connected Entities
1 entities · 10 linked investigations- + 5 more
Timeline(15 events)
2012-01-01
Terence Kwok founds Tink Labs in Hong Kong, approximately age 19–20, to supply complimentary smartphones to hotel guests.
Failory / The Runway2019-07-01
Over 100 Tink Labs employees in European, Middle Eastern, and African offices do not receive their July salaries as the company runs out of funds. SoftBank had previously forced a halt to a Japan joint venture over concerns about misallocation of funds.
Protos2019-08-01
Tink Labs officially closes. The company subsequently enters formal insolvency and bankruptcy liquidation proceedings in January 2020.
Failory2024-05-01
Humanity Protocol closes a $30 million seed round led by Kingsway Capital, with Animoca Brands, Blockchain.com, and Shima Capital participating, at a reported $1 billion valuation.
The Block2025-01-28
Humanity Protocol closes a $20 million funding round led by Pantera Capital and Jump Crypto at a $1.1 billion fully diluted valuation.
The Block2026-01-26
Humanity Investments, Humanity Protocol's venture arm, leads a $6.9 million seed round for 'Everything,' a unified perpetual-futures and payments exchange. Animoca Brands and WallStreetBets founder also participate.
Pulse22025-06-26
A leaked conversation surfaces in which Terence Kwok tells content creator Zun that of approximately nine million Human IDs created, only about one million have completed biometric verification, implying up to 88% bot accounts. The H token subsequently falls over 61% from its launch price.
DL News2026-05-30
H token surges 31% in a single day with a 134% volume increase, beginning a price run-up in the weeks before the exploit.
CryptoTimes2026-06-01
H token reaches an all-time high of approximately $0.85 following a 61% single-day rally.
CryptoTimes2026-06-05
According to Quantstamp's post-incident investigation, the attack begins with a phishing email sent to a Humanity Protocol director, impersonating South Korean exchange Bithumb and containing a malicious attachment with remote-access malware.
Crypto Briefing2026-06-06
Humanity Protocol announces H token staking launch with 30 million tokens in rewards, generating additional market interest days before the exploit.
CryptoTimes2026-06-08
Attackers execute the exploit on June 8–9, draining approximately 141 million H tokens from the Ethereum bridge, minting approximately 300 million H on BNB Chain, and stealing roughly 6 million H from an administrative wallet. Total losses exceed $36 million. H token collapses 80–90% from its recent high.
CoinDesk2026-06-09
Terence Kwok publicly confirms the breach. ZachXBT posts to his Telegram channel characterizing the incident as 'possibly staged,' citing pre-funded attacker wallets and the exclusive use of DEXs for liquidation.
CryptoTimes / Bitcoin.com News2026-06-13
Security firm Quantstamp releases its investigation findings, attributing the attack to DPRK-affiliated threat actors based on phishing methodology, malware certificate signatures, and operational patterns consistent with North Korean cyber groups.
CryptoTimes2026-06-16
Humanity Protocol announces a recovery plan: a 1:1 token replacement airdrop using a June 8 pre-exploit snapshot, an H Compensation Fund for edge cases, identity verification requirements for claimants linked to DPRK attribution, and a planned Humanity Mainnet relaunch.
CryptoTimesDecision Log
- hash: ErEckaZV3pKRD1TYcdp5CR8XkbcdpFeS6sKjo14CURDZ
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 6/26/2026, 11:25:20 PM
last updated: 6/26/2026, 11:25:30 PM
avoid.net — verified advice for a post-truth world