Skip to main content
AVOID.NET

Fetch.ai / NuNet Cross-Project Exploit (September 2026)

avoid.net/fetch-ai-nunet-cross-project-exploit-september-202618/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·mjrVHG…jpfN

Summary

On September 20, 2026, a single attacker exploited a compromised signing key to drain approximately $1.55 million in FET tokens from Fetch.ai's TokenConversionManagerV3 contract on Ethereum, then pivoted within the same minute to mint 408.5 million unauthorized NTX tokens from NuNet, for a combined loss of roughly $2 million. PeckShield and Blockaid both confirmed the two incidents were linked to a single wallet (0x1572...c362), which converted all proceeds to 546.36 ETH. The same attacker subsequently exploited SingularityNET's cross-chain bridge, minting 260 million AGIX and 53.84 million WMTX, bringing estimated total attacker holdings to approximately $16.77 million across all three incidents.

Connected Entities

1 entity

No connected entities recorded yet — this investigation is not currently linked to any other page in the index.

Have evidence about Fetch.ai / NuNet Cross-Project Exploit (September 2026)?

Timeline(8 events)

20 September 2026

Attacker wallet (0x1572...c362) calls conversionIn on Fetch.ai's TokenConversionManagerV3 contract using a compromised but cryptographically valid signing key, draining approximately 8.72 million FET (~$1.55 million) in a single transaction.

KuCoin / PeckShield

20 September 2026

Within the same minute as the FET drain, the same wallet mints 408.5 million NTX tokens (approximately $452,000–$462,730, representing ~42% of NuNet's total supply) through NuNet's deployer account without authorization.

KuCoin / Fetch.ai on-chain analysis

20 September 2026

All stolen FET and NTX proceeds are converted to approximately 546.36 ETH (~$1.44 million), as reported by PeckShield.

KuCoin / PeckShield

20 September 2026

NTX token hits an all-time low, declining between 65% and 90% intraday depending on the measurement point. FET declines approximately 5–10%.

CryptoAdventure / Coin-Turk

20 September 2026

Blockaid publicly confirms both incidents are linked to a single attacker and publishes the exploiter's wallet address (0x1572...c362) and example transactions to enable exchanges to flag and block funds.

BeInCrypto via Yahoo Finance

20 September 2026

Fetch.ai posts on X acknowledging reports of an exploit targeting its token conversion contract and states the team is investigating.

PANews

20 September 2026

PeckShield reports the same attacker subsequently exploited SingularityNET's cross-chain bridge on Ethereum, minting 260 million AGIX and 53.838 million WMTX, with attacker holdings growing to approximately $16.77 million across all incidents.

PANews / KuCoin

20 September 2026

Fetch.ai publishes a preliminary on-chain attack analysis on ASI:One platform, attributing the root cause to a compromised backend signature key for the SingularityNET cross-chain bridge. Fetch.ai and SingularityNET jointly deactivate affected wallets and contracts.

TechFlowPost / KuCoin
Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 10 of 16 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 9/20/2026, 12:07:26 PM

last updated: 9/20/2026, 4:06:12 PM

avoid.net — verified advice for a post-truth world