The decentralized identity project said attackers compromised the keys of a foundation member and are dumping the stolen H tokens for ether.