Blockchain security firm Quantstamp says a phishing email and a compromised laptop were key steps in the recent Humanity Protocol incident that resulted in the theft of $36 million worth of Humanity (H) tokens. The company’s investigation points to North Korea-linked threat activity, citing technical indicators such as a South Korean digital certificate and malware behavior consistent with DPRK intrusion patterns.

Quantstamp reports that the attackers used a malicious attachment disguised as a token lockup schedule update supposedly connected to Bithumb, one of South Korea’s major cryptocurrency exchanges. After the file was delivered to a staff member, malware installed itself and provided attackers with full remote access—allowing them to reach sensitive wallet material used in the protocol’s operations.

Key takeaways

• Quantstamp attributes the Humanity Protocol compromise to a phishing attachment that enabled full remote access to a compromised employee laptop.
• The malware is reported to have been signed with a Hancom digital certificate associated with DPRK-like intrusion patterns.
• Attackers were able to extract wallet credentials, including MetaMask wallet data and private keys, from a Humanity Protocol director.
• Security firms continue to link North Korea-linked actors to a substantial share of crypto theft losses across recent years and 2025.
• Quantstamp’s findings add to a growing pattern where targeted social engineering is used to reach individuals inside crypto projects.

Phishing attachment becomes the access point

In its incident response, Quantstamp said the Humanity Protocol attackers gained leverage through a compromised employee’s laptop. The method, according to the firm, was a phishing email with a malicious attachment that impersonated a token-related update.

The attachment was disguised as what appeared to be a token lockup schedule update from Bithumb. Once opened, the payload installed malware that Quantstamp says granted attackers full remote access to the device.

This matters because it shifts the incident from a purely on-chain exploit narrative to a more human-infrastructure risk narrative: the immediate breach mechanism relied on end-user compromise rather than a direct vulnerability in smart contract code.

Wallet credential theft and the role of remote access

Quantstamp added that the malware’s capabilities extended beyond general control of the laptop. The firm said the attackers used the access to copy Humanity Protocol director Chong Yee Wai’s MetaMask wallet credentials and private keys.

That workflow—stealing wallet material following remote compromise—can enable fast movement of funds. It also highlights why crypto incidents often hinge on endpoint security controls, such as phishing-resistant authentication and strong key-handling procedures, rather than only contract-level defenses.

Technical signals Quantstamp links to DPRK intrusions

Beyond the phishing and remote access, Quantstamp pointed to a technical detail it described as “characteristic of DPRK intrusions.” The firm said the malware was signed with a South Korean Hancom digital certificate.

Quantstamp’s attribution is consistent with how many threat reports are built in cyber investigations: while exact attribution is rarely confirmed publicly, analysts often use combinations of tooling, signing behavior, and operational patterns. In this case, the presence of a specific signing certificate and the observed malware behavior are presented as correlating indicators.

How this fits a broader pattern of North Korea-linked crypto theft

The suspected North Korean link does not appear in isolation. Quantstamp’s report is framed against a backdrop of major crypto thefts that multiple security assessments have attributed to North Korea-linked groups.

Cointelegraph previously reported that North Korea-linked threat actors were tied to at least $578 million of the $634 million stolen in crypto-related incidents in April, referencing an earlier analysis.

Separately, a May report by blockchain security company CertiK said the same actors have been linked to about $2 billion of the $3.4 billion lost to crypto exploits in 2025, while accounting for 12% of total incidents. CertiK characterized the operations as reflecting “precision and scale,” emphasizing that the focus is not only volume but effective execution.

Looking at longer time horizons, a report cited in the article states that over the past decade North Korea-linked actors stole an estimated $6.75 billion in cryptocurrency across 263 documented incidents. CertiK also said North Korea has “industrialized” crypto theft as a core state revenue mechanism, positioning the activity as a meaningful component of external income.

Denial from North Korea, and why attribution stays contentious

North Korea typically does not respond directly to cybercrime allegations. However, the article notes that on May 3, a Foreign Ministry spokesperson rejected claims of involvement in crypto hacks in a statement carried by the Korean Central News Agency.

In that response, the spokesperson argued that the US is spreading “incorrect” narratives about a “non-existent ‘cyber threat’” from North Korea, according to the report referenced in the piece.

For investors and operators, the key takeaway is not to treat attribution claims as courtroom-grade certainty, but to recognize that the patterns behind these incidents—especially endpoint compromise and credential theft—are actionable regardless of attribution debates. Even when state involvement is disputed, the practical defenses remain similar: harden access to personnel systems, reduce exposure to credential-harvesting malware, and ensure recovery and incident response plans assume that social engineering can succeed.

Going forward, the main things readers should watch are follow-up updates from Humanity Protocol and security monitors on whether additional wallets or related infrastructure were targeted, alongside broader tooling guidance from Quantstamp and other analysts on preventing phishing-led endpoint takeovers.

Quick Overview

• Next week marks Kevin Warsh’s inaugural Federal Reserve meeting as chair; while rates likely remain steady, his commentary on inflation and future policy direction will be critical
• AI infrastructure leaders Nvidia and Broadcom deserve attention as data center investment continues at elevated levels
• Commercial space companies Rocket Lab and AST SpaceMobile gain spotlight after SpaceX’s IPO sparks renewed sector interest
• Kroger’s upcoming earnings release provides crucial insight into consumer spending patterns amid persistent inflation and high borrowing costs
• Fresh retail sales figures will supplement the economic picture for investors

Next week brings Kevin Warsh’s debut as Federal Reserve chair. While no rate changes are anticipated, market participants will scrutinize his remarks regarding inflation trends, economic momentum, and the trajectory of monetary policy.

Beyond the Fed proceedings, fresh retail spending data and multiple corporate earnings announcements will provide additional market catalysts.

Below are five equities commanding investor attention.

Nvidia: AI Infrastructure Momentum Continues

Nvidia occupies a dominant position in the artificial intelligence revolution. Appetite for AI accelerators and datacenter components shows no signs of weakening, making any indications about ongoing enterprise AI investment particularly significant for the stock.

NVIDIA Corporation, NVDA

Major cloud computing platforms maintain substantial AI infrastructure budgets, with Nvidia capturing the lion’s share. Should the technology sector maintain stability next week, Nvidia will likely influence broader market direction.

Broadcom: Alternative AI Hardware Powerhouse

Broadcom specializes in customized AI semiconductors and networking hardware deployed across massive data facilities. Investors seeking diversification beyond Nvidia have gravitated toward Broadcom as a compelling long-term AI infrastructure investment.

As organizations scale their AI capabilities, Broadcom’s solutions have become integral to infrastructure expansion. The company ranks among Wall Street’s top AI-adjacent investment choices.

Rocket Lab: Commercial Space Sector Resurges

Rocket Lab has captured renewed investor focus following SpaceX’s widely publicized public offering. As a leading publicly accessible space company, it represents the closest available proxy to SpaceX for public market investors.

The enterprise operates an expanding launch services division while diversifying into satellite manufacturing and defense sector agreements. Heightened enthusiasm for commercial spaceflight has surged recently, positioning Rocket Lab to capitalize on continued momentum.

AST SpaceMobile: Direct Satellite Connectivity Innovation

AST SpaceMobile pursues an ambitious goal: enabling standard mobile devices to communicate directly with satellites without specialized equipment. Market sentiment toward this technology’s viability has strengthened throughout 2026.

The equity has demonstrated significant price swings this year, attracting growth-oriented traders. News regarding satellite launches or strategic partnerships could trigger substantial price movements.

Kroger: Consumer Health Indicator

Kroger delivers quarterly results next week during a period when household budgets face strain from elevated prices and borrowing costs. These figures will illuminate how typical American consumers navigate current financial conditions.

Robust performance might alleviate economic concerns. Disappointing results could amplify anxieties about weakening consumer activity.

Given inflation’s persistent presence in market discussions, Kroger’s announcement may carry outsized significance compared to typical grocery retailer reports.

Federal Reserve Takes Center Stage

Kevin Warsh’s maiden Federal Reserve meeting as chair represents the week’s paramount event. Investors care less about the immediate rate verdict and more about his guidance regarding inflation outlook and monetary policy evolution.

Retail spending statistics will complement this narrative. Combined, the Fed meeting and economic releases will establish the framework for how traders approach these five stocks and broader markets heading into subsequent sessions.

Key Takeaways

• SpaceX launched on public markets Friday with shares at $150, finishing the day with a historic $2.1 trillion valuation
• Federal Reserve Chair Kevin Warsh conducts his inaugural FOMC meeting Wednesday with rates anticipated to remain steady
• Price pressures reached a three-year peak recently, as both consumer and wholesale inflation exceeded forecasts
• Diplomatic progress between Washington and Tehran could unlock the Strait of Hormuz, driving energy prices down
• Notable quarterly reports due from Accenture, CarMax, Kroger, and Jabil

Space Exploration Technologies made financial history this past Friday with its Nasdaq listing, debuting at $150 per share—representing an 11% jump above the $135 initial offering price. The stock surged approximately 20% during trading, catapulting the company’s valuation to roughly $2.1 trillion.

Space Exploration Technologies Corp., SPCX

This valuation positioned SpaceX as the sixth-most valuable corporation in American markets. The milestone also elevated Elon Musk to become the modern world’s first trillionaire.

The public offering generated unprecedented capital, eclipsing every previous IPO in financial history. Equity markets responded positively, with the S&P 500 advancing 0.5% on Friday and gaining 0.6% for the week.

Federal Reserve Leadership Transition

Market attention pivots to Wednesday when the Federal Open Market Committee concludes its two-day policy session. Consensus expectations point toward unchanged interest rates.

Investors are particularly focused on newly appointed Fed Chair Kevin Warsh. Wednesday marks his inaugural FOMC meeting following his May 22 swearing-in ceremony. His post-announcement press briefing will offer the first substantive insight into his inflation management strategy.

May’s consumer price index accelerated at the quickest rate since 2023. Wholesale prices climbed at their fastest velocity since November 2022. Employment additions have consistently surpassed projections for multiple consecutive months.

Warsh has historically advocated that the Federal Reserve should avoid overly prescriptive forward guidance, a stance that could heighten market volatility as traders interpret each economic release to anticipate policy shifts.

President Trump has advocated for rate reductions, though BNP Paribas analysts note current economic conditions differ substantially from the environment during the Fed’s autumn rate cuts.

Macquarie strategists have highlighted that artificial intelligence infrastructure spending may be generating near-term inflationary pressures, potentially contradicting Warsh’s perspective that AI technology delivers long-term disinflationary effects.

Middle East Diplomacy and Energy Markets

Geopolitical developments brought encouraging signals Friday. American and Iranian negotiators appear close to finalizing an agreement that would restore access through the Strait of Hormuz, shuttered throughout the current conflict.

Iranian government media indicated the framework may include American military withdrawal, unfreezing $24 billion in Iranian funds, and $300 billion allocated for reconstruction initiatives. American officials outlined provisions encompassing elimination of Iran’s enriched uranium reserves and conditional asset releases contingent on verification.

Oil prices retreated following the announcement but continue trading significantly above pre-conflict levels. Rystad Energy calculates the hostilities have already produced aggregate supply disruptions totaling one billion barrels, with projections suggesting this figure could approach two billion barrels by year’s end.

Even with a signed agreement, energy markets face an extended recovery timeline.

Corporate Earnings Calendar

CarMax unveils first-quarter financial performance Wednesday morning, with analysts monitoring used automobile market dynamics under recently appointed CEO Keith Barr. Accenture presents results Thursday, facing scrutiny regarding federal budget reductions and emerging artificial intelligence competition. Kroger and Jabil also announce earnings during the week.

May retail sales figures release Wednesday, providing fresh perspective on consumer behavior amid elevated price environments.

Key Highlights

• Space Exploration Technologies’ shares jumped 19% during inaugural trading session, finishing at $160.95
• Individual traders purchased roughly $118 million worth of SpaceX shares on Friday, including $18 million within the opening 20 minutes
• Demand for the offering significantly exceeded supply across every distribution channel, resulting in partial allocations for most investors
• According to Vanda Research, retail traders liquidated positions in AI-focused stocks including Micron, Sandisk, and Marvell to finance SpaceX acquisitions
• Ben Snider, strategist at Goldman Sachs, stated that unprecedented US equity issuance levels “will not derail the bull market in 2026”

Space Exploration Technologies Corp. (SPCX) entered public markets on Friday, delivering results that captured widespread attention.

Space Exploration Technologies Corp., SPCX

Shares climbed 19% during the inaugural session, establishing the company as one of America’s largest publicly traded entities with an approximate market capitalization of $2.1 trillion.

The closing price reached $160.95, followed by an additional 3.66% gain in extended trading to $166.83.

Individual investors played a significant role in the launch. Data from Vanda Research indicates that retail traders acquired approximately $118 million in SpaceX stock throughout Friday’s session. The initial 20 minutes alone accounted for roughly $18 million in retail purchases.

“The big X factor is Elon’s army of retailer support,” stated Justus Parmar, CEO of Fortuna Investments, commenting before trading commenced.

Parmar verified that demand was “very, very oversubscribed through all channels,” noting his firm obtained merely a small percentage of its requested allocation.

The market entry occurred following a turbulent week for equities. The Nasdaq experienced significant declines earlier in the month after robust economic indicators intensified concerns about the Federal Reserve maintaining elevated interest rates. Geopolitical tensions in the Middle East drove oil prices higher. Market sentiment remained cautious.

Individual Investors Shift From AI Stocks

Vanda Research observed that retail participants appeared to exit positions in former AI sector favorites — Micron (MU), Sandisk (SNDK), and Marvell (MRVL) — to generate capital for SpaceX investments.

“If SpaceX is seen as the ‘real deal’ by retail, further selling in prior darlings would not be surprising,” Vanda reported.

The research firm highlighted that individual investors throughout 2026 have demonstrated “very selective and tactical” behavior, contrasting with the more indiscriminate meme-stock purchasing patterns observed in previous years.

Tom Sosnoff, founder and CEO of Lossdog, characterized market appetite in direct terms: “On a scale from 1 to 10, I would say it’s a 10.”

Expert Perspectives and Caution

Not all market observers are rushing to participate. Multiple analysts cautioned against immediate entry on the debut date. Historical precedents including Meta, Robinhood (HOOD), and Coinbase (COIN) all provided more attractive purchasing opportunities following the expiration of lock-up restrictions.

“It’s like an iceberg. There’s a lot of sellers underneath,” observed Roger Ibbotson, professor emeritus at Yale.

The company divested approximately 5% of its equity through the public offering — indicating a substantial number of early-stage investors and company insiders remain positioned to potentially sell shares later.

Ben Snider, strategist at Goldman Sachs, recognized record-breaking US equity issuance volumes but maintained it “will not derail the bull market in 2026.” He did observe that “as lockups expire, the balance of equity supply and demand will become more challenging in 2027.”

Goldman maintains its projection for the S&P 500 to reach 8,000 before year-end.

Nancy Tengler from Laffer Tengler Investments drew parallels to Amazon (AMZN), which debuted publicly in 1997 at $18 per share and has subsequently appreciated over 200,000%.

The SpaceX public offering coincides with Alphabet (GOOGL) securing additional capital, while OpenAI and Anthropic are anticipated to pursue their own public listings during the latter portion of the year.

Since debuting on Base in 2023, Aerodrome has become one of the most widely known DEXs on the network by using a system that rewards token holders for directing liquidity incentives toward trading pools. The model helped solve one of DeFi’s longstanding problems: how to bootstrap liquidity for new assets and keep it from disappearing when incentives dry up.

Prediction market similarities

But the model has an inherent limitation, according to Cutler. Decisions are largely based on past performance.

Predictive Allocation seeks to flip that dynamic. Instead of rewarding participants for directing incentives toward pools that have already generated fees, the system encourages them to anticipate where liquidity will be needed next. Those who correctly identify future demand receive a greater share of the revenue generated by those markets.

“The liquidity is now moving in an anticipatory way ahead of where the market is,” Cutler said.

The concept borrows heavily from prediction markets, which use financial incentives to aggregate forecasts about future events. But unlike traditional prediction markets, participants aren’t merely speculating on an outcome.

“It takes that asymmetric upside and truth discovery and brings it into market creation and spot markets for the first time,” Cutler said.

The distinction is important. In a traditional prediction market, traders bet on events they cannot influence. Under Predictive Allocation, directing incentives toward a pool helps create the liquidity needed for that market to succeed. The prediction and the investment become the same action.

Ethereum developers are exploring a path to protect accounts from future quantum-computing threats without waiting for a costly network upgrade. According to Ethereum Foundation researcher Nicolas Consigny, the “Kohaku” project lead, Ethereum could begin adding post-quantum protections at an estimated cost of as little as $0.07 per action, leveraging a new on-EVM approach rather than a hard fork.

Consigny shared details in an X post on Saturday and pointed to a corresponding research write-up on Ethresear.ch. The proposal adapts SPHINCS+, a post-quantum signature scheme standardized by the U.S. National Institute of Standards and Technology (NIST), to make onchain verification cheaper on Ethereum. The work is framed as a stepping stone toward a future, more optimized design called “leanSPHINCS.”

Key takeaways

• Ethereum Foundation research proposes “SPHINCS-,” an adaptation of SPHINCS+ aimed at reducing onchain post-quantum signature verification costs.
• The approach is intended to work without requiring a protocol hard fork and without relying on a new precompile.
• Consigny describes SPHINCS- as an intermediate bridge toward “leanSPHINCS,” which targets even lower costs via signature aggregation.
• The motivation is long-term quantum risk to Ethereum’s current reliance on elliptic-curve cryptography for signatures.

From NIST post-quantum signatures to “SPHINCS-” on the EVM

In his Saturday post, Consigny outlined a proposal that takes SPHINCS+—a post-quantum signature standard—then modifies how it can be verified in an Ethereum smart-contract environment. The core claim is that the updated scheme can cut the onchain verification burden, allowing post-quantum protections to be introduced earlier than would be feasible with a full protocol change.

The paper describes the method as “SPHINCS-,” emphasizing that the goal is cost reduction on the EVM while keeping deployment practical. Consigny specifically positioned it as something that could be used before a dedicated hard fork is ready, which matters for an ecosystem where upgrading cryptographic primitives typically involves coordination, tooling updates, and migration planning.

Equally important, the proposal is not framed as a final destination. Consigny described SPHINCS- as a “bridge” toward “leanSPHINCS,” a future system intended to further lower verification costs by aggregating signatures—an efficiency technique that could reduce the amount of work required per verified authorization.

Why Ethereum is moving early on quantum-resistant accounts

Ethereum’s account security today depends on digital signatures tied to elliptic-curve cryptography. While quantum computers powerful enough to break widely used elliptic-curve schemes do not exist at the scale required in practice, the industry is preparing for a scenario where cryptographic assumptions change.

Consigny’s proposal is aimed at reducing exposure over time by introducing post-quantum protections before Ethereum has a full, consensus-level replacement of its signature layer. In that sense, the research is less about replacing everything immediately and more about building optional, deployable defenses that can become more common as better efficiency techniques—like the leanSPHINCS direction—mature.

The cost figure Consigny referenced—potentially as low as $0.07—signals a practical constraint: even if a cryptographic approach is theoretically correct, it may fail to gain traction if it is too expensive to verify onchain. By focusing on verification cost and deployment path (no hard fork, no precompile), the work tries to address that adoption barrier directly.

Quantum research outside Ethereum also underscores the urgency

The push toward quantum-resistant cryptography is not happening in isolation. Earlier coverage highlighted real-world proof-of-concept research demonstrating that quantum algorithms can threaten certain elliptic-curve constructions under specific conditions. In April, post-quantum startup Project Eleven awarded a prize to researcher Giancarlo Lelli for using a quantum computer to break a 15-bit elliptic-curve key, using a variant of Shor’s algorithm.

Bitcoin is often used as the contrasting example because it relies on 256-bit elliptic-curve keys, which are far larger than the small key size used in the demonstration. Still, the episode fed broader discussions on whether the academic-to-practical gap for quantum attacks could close faster than many expect.

Glassnode’s analysis, as cited in the same broader conversation, suggested that a meaningful portion of Bitcoin could be “unsafe” in a future quantum attack scenario based on key exposure and address/key management practices. According to that reporting, about 1.92 million BTC—nearly 10% of supply—were considered “structurally unsafe,” while another 4.12 million BTC (20.6%) were labeled “operationally unsafe.” Glassnode estimated the remaining 69.8% (13.99 million BTC) as unexposed in that framework, broadly aligning with Ark Invest’s earlier March estimate that 65% of supply was safe.

While those figures concern Bitcoin rather than Ethereum, they illustrate the same practical reality that post-quantum migration isn’t just about cryptography. It is also about operational choices—how keys are generated, stored, and used—because those choices determine how quickly protections can be adopted when new threat models emerge.

What to watch next for Ethereum’s post-quantum roadmap

Consigny’s SPHINCS- proposal suggests Ethereum could begin experimenting with post-quantum protections in a deployable way ahead of a larger migration. What remains uncertain is how quickly “SPHINCS-” can move from research to mainstream adoption—particularly as the team evaluates tradeoffs between cost, security properties, and developer ergonomics compared with a more complete future design like leanSPHINCS.

Investors, builders, and wallets should watch for follow-up work on implementation details—especially any evaluations of real onchain costs in production-like environments—and whether client tooling, smart-contract libraries, or account abstraction flows begin incorporating these post-quantum verification options. As quantum timelines remain speculative, the most actionable signal is whether Ethereum can make post-quantum adoption routine without forcing a one-time hard fork.

TLDR:

• XRP was listed as an eligible asset in the SEC-approved T. Rowe Price Active Crypto ETF on June 12.
• The actively managed ETF can hold between 5 and 15 crypto assets under NYSE Arca listing rules.
• Senator Tim Scott projected crypto’s market cap could surge from $3 trillion to $30 trillion.
• The Clarity Act, backed by Ripple and Coinbase, could reach the Senate floor by July 2026.

XRP is gaining new institutional footholds as two major U.S. developments converge. The SEC approved the T. Rowe Price Active Crypto ETF on June 12, 2026, listing XRP among eligible assets.

Separately, Senate Banking Committee Chairman Tim Scott projected crypto’s market cap could reach $30 trillion following passage of the Clarity Act. Both developments are broadening regulated access to XRP across investment channels.

Rowe Price ETF Expands XRP’s Institutional Reach

The SEC approved NYSE Arca’s proposal to list and trade shares of the T. Rowe Price Active Crypto ETF on June 12, 2026. The fund uses an active strategy to invest in eligible crypto assets.

This marks the asset manager’s first official entry into digital asset products, opening a regulated channel for institutional capital to flow into XRP.

The ETF will provide investors access to a portfolio of between five and fifteen different cryptocurrencies. The current draft includes Bitcoin, Ethereum, Solana, XRP, Cardano, Avalanche, Litecoin, Polkadot, Dogecoin, Chainlink, Stellar, Hedera, Bitcoin Cash, Shiba Inu, and Sui.

Crypto analyst Chloe noted on X that the structure gives institutional investors regulated exposure to XRP within a familiar ETF wrapper, lowering the barrier for traditional finance participation.

The T. Rowe Price Active Crypto ETF will benchmark against the FTSE Crypto US Listed Index but aims to outperform it through active portfolio management.

Under the approval, NYSE Arca added firewall rules for sponsor staff and conditions requiring equal portfolio transparency for all market participants.

The active management approach gives the sponsor flexibility to adjust XRP exposure as market conditions evolve.

Tim Scott’s $30T Projection Puts XRP in Focus

Senator Tim Scott has emerged as a central figure in shaping the regulatory environment for XRP and the broader crypto market.

Crypto commentator CryptoXAiMan highlighted on X that Scott projected the crypto market cap could grow from $3 trillion to $30 trillion after the Clarity Act passes, a forecast that has reverberated across institutional and retail circles alike.

Scott recently said the legislation is in the “red zone,” expressing hope to bring the Clarity Act to the Senate floor in June or July 2026.

The bill cleared the House with a strong bipartisan majority in July 2025 but faced months of delays as banks and stablecoin companies disputed key provisions around yield and DeFi treatment.

At a Senate committee hearing, Scott argued that developers, entrepreneurs, and investors had long faced uncertainty and enforcement actions instead of clear rules of the road.

The bill counts Ripple, Coinbase, Circle, and Andreessen Horowitz among its key backers. With Ripple’s direct role in advocacy, a favorable Clarity Act outcome positions XRP as a primary beneficiary of any market cap expansion that follows.