BlockBeats News, June 9th, Humanity has released an update on the attack incident. As of now, over $36 million worth of tokens on Ethereum and BNB Chain have been stolen and sold. The incident originated from a breach of an employee's laptop, compromising three out of six Gnosis Safe owner keys of the Hyperlane Bridge ProxyAdmin. The attacker used these keys to transfer ownership of the ProxyAdmin to their wallet, then maliciously upgraded the bridge contract and in a single transaction stole approximately 1.412 billion H tokens. Three out of five BNB Chain Safe owner keys were also compromised. The attacker executed similar operations on the BNB Chain, deploying a malicious implementation with an infinite mint function and minted 2 billion H tokens directly to their wallet in two separate batches.
Humanity has stated that all deposits and withdrawals on the affected cross-chain platforms have been temporarily suspended, and they are working with all parties involved to mitigate the losses. Apart from an internal investigation, Humanity has mentioned that they are closely collaborating with law enforcement to investigate the incident and recover some of the stolen funds.
