Humanity Protocol’s $36M Hack Linked to Suspected North Korean Actors, Quantstamp Says

Quantstamp says a fake Bithumb email used in the $36 million Humanity Protocol hack points to suspected North Korean threat actors. The claim adds another security concern for crypto companies facing increasingly sophisticated phishing and social engineering risks.

Humanity Protocol’s $36M Hack Linked to Suspected North Korean Actors, Quantstamp Says

What happened?

Quantstamp says a fake Bithumb email used in the $36 million Humanity Protocol hack points to suspected North Korean threat actors. The claim adds another security concern for crypto companies facing increasingly sophisticated phishing and social engineering risks.

Why it matters

Quantstamp’s findings remain tied to the indicators described in the report, including the fake Bithumb email. No further claims about fund recovery, market impact or additional victims were included in the supplied source material.

Quantstamp has linked the $36 million Humanity Protocol hack to suspected North Korean threat actors, citing the use of a fake Bithumb email in the attack. According to the firm, that email was a key indicator pointing toward the possible involvement of North Korea-linked hackers.

The development matters because phishing-style tactics remain a major risk across the crypto sector, especially when attackers impersonate known companies or platforms. For projects, exchanges and users, the reported use of a fraudulent Bithumb message highlights how trusted brand names can be weaponized in high-value attacks.

Humanity Protocol was reportedly hit for $36 million, making the incident a significant security event for the project. Quantstamp’s assessment does not describe the fake email as a minor detail, but as evidence that helped connect the breach to suspected state-linked activity.

The case also adds to broader concerns about the operational security of crypto teams. When attackers rely on convincing communications rather than only technical exploits, companies must treat email verification, internal approvals and incident response as core parts of their defense posture.

Quantstamp’s findings remain tied to the indicators described in the report, including the fake Bithumb email. No further claims about fund recovery, market impact or additional victims were included in the supplied source material.

Source: Cointelegraph

Keep exploring

Related stories

Bitget to Leave Japan and Close Remaining Positions by Year-End

Bitget to Leave Japan and Close Remaining Positions by Year-End

Bitget plans to exit the Japanese market and close all remaining positions by the end of the year. The move adds to ongoing shifts among crypto companies navigating Japan’s regulatory environment.

Read
State of Crypto countdown highlights key industry developments

State of Crypto countdown highlights key industry developments

CoinDesk’s State of Crypto coverage counts down recent developments shaping the crypto policy and market landscape. The report frames these changes as important for how companies and participants navigate the sector.

Read
Strategy Keeps STRC Dividend at 12%

Strategy Keeps STRC Dividend at 12%

Strategy said it is holding the dividend on its STRC preferred stock at 12%. The decision keeps the payout unchanged for investors in the company’s yield-focused security.

Read