Skip to content
Coordinated Exploit Drains $2M from Fetch.ai and NuNet

Coordinated Exploit Drains $2M from Fetch.ai and NuNet

First seen 20 Sep 2026, 20:59 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 21, 2026 at 18:54 UTC
  • •A hacker drained $1.56 million in FET and minted $463,000 in NTX through a single exploit.
  • •The exploit was facilitated by a lack of security checks in Fetch.ai's token conversion contract.
  • •NTX's value dropped by over 70%, while FET fell by approximately 5-9% following the incident.

On September 19, 2026, a hacker exploited vulnerabilities in Fetch.ai's token converter, draining 8.72 million FET tokens worth approximately $1.56 million. Simultaneously, the same attacker minted 408.5 million unauthorized NTX tokens through NuNet, valued at around $463,000. The total loss from these coordinated attacks is estimated at $2.01 million. The exploit occurred due to a lack of proper security checks in the TokenConversionManagerV3 contract, allowing the attacker to use a valid authorization signature without verifying token locks. Following the exploit, NTX's price plummeted by over 70%, while FET experienced a smaller decline of about 5-9%. Security firms have linked both incidents to the same wallet, indicating a systemic risk within the Artificial Superintelligence Alliance ecosystem. As of now, Fetch.ai has paused certain token conversions and is investigating the incident further.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 47d ago How this analysis works

Timeline

2026-09-19
Exploit executed on Fetch.ai and NuNet
A hacker drained 8.72 million FET and minted 408.5 million NTX tokens, totaling $2.01 million in losses.
Coinmarketcap
2026-09-20
NTX price crashes 95%
Following the minting of unauthorized NTX tokens, the price dropped from $0.0013 to $0.00005559.
Ambcrypto
2026-09-20
Fetch.ai pauses token conversions
Fetch.ai confirmed its contracts remain secure and paused AGIX-to-FET conversions for review.
Pluang
2026-09-21
Security analysis confirms exploit details
Security firms traced the exploit to a compromised signing key linked to SingularityNET's infrastructure.
news.bitcoin.com

More articles in this cluster (10)

Following this threat?

Track Artificial Superintelligence Alliance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed