Wu said that Yuxian, the founder of Slow Fog, posted on X stating that the blockchain identity authentication platform Humanity Protocol has a security vulnerability. It has been verified that the project automatically assigns wallets when users log in through email and other Web2 methods, and directly stores the plaintext private keys in the browser's sessionStorage. This practice is considered a low-level high-risk error. Fortunately, it is currently only on the testnet and has not caused actual harm.