Humanity Protocol’s $36M Hack Linked to Suspected North Korean Actors, Quantstamp Says

Quantstamp says a fake Bithumb email used in the $36 million Humanity Protocol hack points to suspected North Korean threat actors. The claim adds another security concern for crypto companies facing increasingly sophisticated phishing and social engineering risks.

Humanity Protocol’s $36M Hack Linked to Suspected North Korean Actors, Quantstamp Says

What happened?

Quantstamp says a fake Bithumb email used in the $36 million Humanity Protocol hack points to suspected North Korean threat actors. The claim adds another security concern for crypto companies facing increasingly sophisticated phishing and social engineering risks.

Why it matters

Quantstamp’s findings remain tied to the indicators described in the report, including the fake Bithumb email. No further claims about fund recovery, market impact or additional victims were included in the supplied source material.

Quantstamp has linked the $36 million Humanity Protocol hack to suspected North Korean threat actors, citing the use of a fake Bithumb email in the attack. According to the firm, that email was a key indicator pointing toward the possible involvement of North Korea-linked hackers.

The development matters because phishing-style tactics remain a major risk across the crypto sector, especially when attackers impersonate known companies or platforms. For projects, exchanges and users, the reported use of a fraudulent Bithumb message highlights how trusted brand names can be weaponized in high-value attacks.

Humanity Protocol was reportedly hit for $36 million, making the incident a significant security event for the project. Quantstamp’s assessment does not describe the fake email as a minor detail, but as evidence that helped connect the breach to suspected state-linked activity.

The case also adds to broader concerns about the operational security of crypto teams. When attackers rely on convincing communications rather than only technical exploits, companies must treat email verification, internal approvals and incident response as core parts of their defense posture.

Quantstamp’s findings remain tied to the indicators described in the report, including the fake Bithumb email. No further claims about fund recovery, market impact or additional victims were included in the supplied source material.

Source: Cointelegraph

Keep exploring

Related stories

Two Weeks Left for Clarity in U.S. Crypto Policy Debate

Two Weeks Left for Clarity in U.S. Crypto Policy Debate

The latest State of Crypto update says the industry has two weeks left in the push for the Clarity effort. The development keeps attention on U.S. crypto policy as companies and market participants watch for regulatory direction.

Read
Sberbank plans crypto trading infrastructure launch by Dec. 1

Sberbank plans crypto trading infrastructure launch by Dec. 1

Russia’s biggest bank says it plans to create cryptocurrency trading infrastructure by Dec. 1, as the country moves toward setting rules for market participants. The development comes alongside plans to allow crypto assets to be used in foreign trade operations.

Read
Mira Murati’s Thinking Machines Debuts Inkling on OpenRouter

Mira Murati’s Thinking Machines Debuts Inkling on OpenRouter

Thinking Machines Lab has released Inkling, its first model after two years of silence, and it is now available on OpenRouter. The model’s MCP score appears strong, though its price-to-performance case is more complex.

Read