Humanode EVM exploited for 12M HMND tokens; team offers whitehat bounty of 20% keep to hacker if remaining 80% returned.
Security & Exploits ·
An exploit of the Humanode EVM protocol resulted in the theft of 12 million HMND tokens from 438 wallets on October 28, 2026. The Humanode team posted an on-chain message to the address associated with the exploit, detailing the breach and offering a whitehat bounty structure as a path to recovery.
The team's proposal grants the exploiter 20 percent of the stolen assets if the remaining 80 percent—comprising both the HMND tokens and USDC that were bridged out—are returned to the team's address. The message was transmitted directly on-chain via Arbitrum, with the team indicating willingness to receive responses either through on-chain communication or via Blockscan Chat.
No details have emerged regarding the exploiter's response, the technical nature of the vulnerability, or whether negotiations have advanced. The outcome remains uncertain as of now.