Fetch.ai, SingularityNET and NuNet investigate privileged-key exploit

Sep 20, 2026 22:07 (33d ago)

A compromised SingularityNET bridge authorization key enabled the withdrawal of 8.72 million FET.
A separate compromised NuNet minter created 408.5 million NTX, about 42% of documented supply, and sent it to the same wallet.
Fetch.ai paused AGIX-to-FET conversions and its Ethereum-side bridge, while normal FET transfers remained operational.

A coordinated Sept. 19 attack drained 8,721,530 FET, worth about $1.55 million at the time, from SingularityNET's Ethereum-side bridge conversion contract and used a compromised NuNet minter to create 408.5 million NTX. Athena's on-chain analysis found both assets were sent to the same attacker-controlled wallet, linking separate compromised credentials. The FET withdrawal used a valid signature from a trusted backend authorization key rather than bypassing a contract flaw. Fetch.ai paused AGIX-to-FET conversions and its Ethereum-side bridge while investigating, but said its own contracts and ordinary FET transfers remained operational.

FET