Humanode EVM exploited on October 28, 2026; attacker drained HMND from 438 wallets and bridged out USDC, team offering 20% whitehat bounty for return of remaining 80%.
Security & Exploits ·
On October 28, 2026, the Humanode EVM network was exploited, with an attacker gaining access to native HMND tokens held across 438 wallets. The breach was confirmed through an on-chain message sent by the Humanode team to the wallet address associated with the exploit, identifying a specific transaction in which the theft occurred. In addition to draining HMND, the attacker bridged out USDC from the network.
The Humanode team responded by proposing a whitehat recovery agreement, offering the attacker the opportunity to retain 20 percent of the stolen funds in exchange for returning the remaining 80 percent—comprising both the bridged USDC and the HMND tokens. The team invited the attacker to reply on-chain or through Blockscan Chat to accept the bounty terms.
The scope of total loss, the attacker's current holdings of the stolen assets, and whether negotiations have progressed remain unclear. The exploit's root cause and whether Humanode EVM's security has been patched are also not yet disclosed.