Proof of Humanity? More Like Proof of Hubris Let’s talk about the @Humanityprot exploit, because I am absolutely drowning in the irony today. We’ve spent the last two years listening to founders pitch us on "sybil resistance," "biometric identity," and how Web3 is going to save the world from AI bots by scanning our retinas, palms, and probably our souls. "Human-centric blockchain," they said. Well, turns out the smart contracts running the show were deeply, tragically human. As in, flawed, rushed, and apparently unaudited by anyone with a functioning brain. The TL;DR on the Exploit For those who missed the chaos on X because you were actually outside touching grass (congrats, by the way), it wasn’t some futuristic AI-driven deepfake bypass. It was a classic, run-of-the-mill logic flaw in the reward distribution contract. The protocol used a zero-knowledge (ZK) proof system to verify unique human registration. Standard stuff. Except, the contract failed to properly validate the nullifier hash. The hacker realized they could submit the exact same valid ZK-proof multiple times by subtly altering the transaction metadata. The contract saw a "unique" transaction, assumed it was a unique human, and minted tokens. Over, and over, and over again. The result is one guy with a basic script minted enough "Unique Human" reward tokens ethereum:0xcf5104d094e3864cfcbda43b82e1cefd26a016eb to drain the entire liquidity pool on Uniswap before the team even woke up to pause the bridge. The Bitter Irony You honestly can't make this stuff up. A protocol built specifically to prevent Sybil attacks (one entity pretending to be many) got absolutely wrecked by a Sybil attack on their reward contract. We are so obsessed with building the frontier of tech like palm scanning, iris tech, and cryptographic zero-knowledge proofs that we keep forgetting the absolute basics of Solidity security. You can build the most secure biometric vault in the world, but if you leave the backdoor keys under the welcome mat, someone is going to walk in and take your TV. Where Do We Go From Here? Humanity Protocol is already spinning the usual PR narrative: "Funds are SAFU, it was a sophisticated attack, we are working with law enforcement." But let’s be real. It wasn't sophisticated. It was lazy coding. If we want Web3 to actually achieve mainstream adoption, we need to stop treating security like a post-launch DLC. Check your inputs. Validate your nullifiers. And for the love of Satoshi, stop letting marketing hype outpace your engineering reality.

Over 238k out 416k crystals were sold in the last cycle. If you chose to sell a part of your crystals, have a look at app.multipli.fi to either : - earn the best risk adjusted yield on your reward ORBs - redeem your rewards into your wallet in the next withdrawal cycle