A single on-chain actor carried out a coordinated exploit against three decentralized artificial intelligence projects over the weekend of September 19–21, 2026, draining roughly $2.25 million in realized value and creating severe token supply shocks, according to blockchain intelligence firms Bitquery and PeckShield. The initial Fetch.ai and NuNet moves alone were valued near $2.01 million.
The affected protocols — Fetch.ai (FET), NuNet (NTX), and SingularityNET (AGIX) — are all members of the Artificial Superintelligence Alliance ecosystem. The attacker first pulled about 8.72 million FET from Fetch.ai’s TokenConversionManagerV3 contract on Ethereum and received approximately 408.5 million freshly minted NTX from NuNet’s deployer account. Those NTX tokens represented about 42% of NuNet’s circulating supply, effectively rewriting the token’s economics in a single transaction.
Hours later, the SingularityNET bridge was exploited, resulting in the unauthorized minting of 900 million AGIX, 500 million WMTx from World Mobile Chain, and 500 million CGV from Cogito. PeckShield estimated the exploiter’s total unrealized gains at nearly $17 million, including 198.3 million AGIX worth about $14.42 million and 649 ETH worth about $1.67 million at the time.
The largest realized gain came from selling the genuine FET for 523 ETH, or roughly $1.2 million. The freshly minted CGV tokens returned barely $30 because of extremely scarce liquidity. Bitquery also detected a prior sweep of ETH and BNB from 16 wallets, four of them previously identified as belonging to SingularityNET or NuNet personnel, along with $289,575 in USDC stolen from a payroll contract. The report warned that most compromised signing keys had not yet been replaced.
Market reaction was stark. FET slipped as traders priced in converter failure and loss of confidence, while NTX collapsed by anywhere from 65% to more than 90% within hours as the new supply hit circulation. The incident shows that AI-crypto clusters often share more than branding, and privileged access in a converter or deployer can cause damage far beyond a single project.
