Golden Finance reported that according to information disclosed by SlowMist founder Yu Xian, the Humanity Protocol project party stores the plaintext private key directly in the browser sessionStorage. The premise is that you use Web2 to log in, such as email, and the platform will automatically assign a wallet to the user. Fortunately, this is just a test network, and there is no actual harm.