Audit log

Every state-changing event for SingularityNET: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-09-22 17:07:02Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 449,441,424

   sig

   4stqtsnnJEpe…PDn6ASWWcopyexplorer ↗

   hash

   HjCeUnjt1vrs…EPwJBAmucopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (22985 B) ▸

   {"actor":"system:backfill","investigation_id":"f8c9cadf-e1e8-4696-b4d2-3f487a0ef174","kind":"publish","page_slug":"singularitynet","published_at":"2026-09-22T17:07:01.914Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"SingularityNET","sections":[{"content":"On the evening of September 19, 2026 (first exploit transaction recorded at 20:21 UTC), an attacker drained Fetch.ai's TokenConversionManagerV3 contract — the Ethereum-side component of the official SingularityNET bridge linking Ethereum and Cardano — of its entire FET liquidity: 8,721,530 FET tokens valued at approximately $1.55 million. Approximately 29 minutes later, additional unauthorized minting operations began. By September 20, 2026, the same threat actor had minted 260 million AGIX tokens and 53.838 million WMTx tokens on Ethereum, exploiting the same compromised key infrastructure. On-chain security firm PeckShield publicly attributed the full sequence of attacks to a single cluster and reported total attacker-controlled holdings of approximately $16.77 million as of September 21, 2026, including 198.3 million AGIX (approximately $14.42 million), 649 ETH (approximately $1.67 million), and 33.538 million WMTx. The attacker had already realized approximately $2.25 million through token sales by September 21. Protos reported that the attacker also conducted a preliminary sweep of ETH and BNB from approximately 16 wallets, some of which were described as belonging to SingularityNET or NuNet staff, and extracted $289,575 in USDC from a payroll contract. Two attacker wallet addresses identified in on-chain analysis include 0x2dcc1085fDCf418B421E45e86e4e54637cc21dfE (primary cluster wallet) and 0x1572F2af7696b39c85E3221CDE8EFb640F86c362 (initiating address).","heading":"Incident Overview","severity":"critical","sources":[{"credibility":2,"name":"Key Compromise Behind Fetch.ai-Linked Bridge Attack Drives Losses To $16.77M — Metaverse Post","type":"news_article","url":"https://mpost.io/key-compromise-behind-fetch-ai-linked-bridge-attack-drives-losses-to-16-77m/"},{"credibility":2,"name":"SingularityNET Bridge Hack Widens: 260M AGIX, 53.8M WMTx Minted, $16.77M Held by Attacker — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/09/21/singularitynet-bridge-hack-widens-260m-agix-53-8m-wmtx-minted-16-77m-held-by-attacker/"},{"credibility":2,"name":"PeckShield: Same attacker breached SingularityNET, illicitly minting 260 million AGIX and 53.838 million WMTx — PANews","type":"on_chain","url":"https://panews.io/articles/01a0be2e-f8c9-738c-a585-a4d7708cc32b"},{"credibility":2,"name":"$2M stolen in triple attack on Fetch.ai, NuNet, and SingularityNET — Protos","type":"news_article","url":"https://protos.com/2m-stolen-in-triple-attack-on-fetch-ai-nunet-and-singularitynet/"},{"credibility":2,"name":"Hackers exploit SingularityNET bridge vulnerability, illegally mint $16.77M in AGIX and WMTx — KuCoin","type":"news_article","url":"https://www.kucoin.com/news/flash/hackers-exploit-singularitynet-bridge-vulnerability-illegally-mint-16-77m-in-agix-and-wmtx"}]},{"content":"Security analysis across multiple outlets and on-chain analysts identified the root cause as an operational security failure in key custody rather than a smart-contract code vulnerability. The bridge's primary signing component was a nonce-zero offline key — an offline conversion authorizer that exists solely to produce valid cryptographic signatures authorizing bridge transactions. The attacker obtained this key and used it to submit transactions that the TokenConversionManagerV3 accepted as legitimately signed. No exploit of contract logic was required; the signed authorizations were structurally valid. Two contract design flaws identified by analysts amplified the damage: the conversionIn function had no per-conversion token limits, allowing the full FET liquidity pool to be drained in a single call; and the signed digest did not include the recipient address as a protected field, enabling the attacker to redirect payouts. A separately compromised dormant AGIX minter key — inactive since 2023 — was additionally used to mint the 260 million AGIX tokens. The NuNet deployer account 0x863F13e5B505f1Eb17803b94EC9d3DaF80092165 was also implicated in the NTX minting. Bitquery's on-chain monitoring reported as of September 21, 2026, that the compromised conversion authorizer had not been rotated and the stolen NuNet minter role had not been revoked, meaning both attack vectors remained technically viable more than 48 hours after the initial exploit.","heading":"Root Cause: Key Custody Failure","severity":"critical","sources":[{"credibility":2,"name":"Key Compromise Behind Fetch.ai-Linked Bridge Attack Drives Losses To $16.77M — Metaverse Post","type":"news_article","url":"https://mpost.io/key-compromise-behind-fetch-ai-linked-bridge-attack-drives-losses-to-16-77m/"},{"credibility":2,"name":"SingularityNET Bridge Hack Widens: 260M AGIX, 53.8M WMTx Minted, $16.77M Held by Attacker — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/09/21/singularitynet-bridge-hack-widens-260m-agix-53-8m-wmtx-minted-16-77m-held-by-attacker/"}]},{"content":"AGIX fell from approximately $0.0775 to $0.0006841 per token — a decline of more than 99% — within 24 hours of the exploit becoming public. Based on AGIX's 1.21 billion circulating supply, Blockzeit estimated the wipeout at approximately $93 million in market capitalization. Coinotag similarly reported the token plunging 99% following the minting of 260 million unauthorized tokens. NTX (NuNet) fell between 65% and 90% depending on the reference point, hitting an all-time low during the same window. WMTx declined approximately 43%. FET, whose core contracts Fetch.ai confirmed were not directly affected, declined approximately 1.53% to $0.1773 over the 24-hour window. The attacker's effective realized profit from sales was approximately $2.25 million as of September 21, 2026, with unrealized holdings potentially worth $17 million at the moment of acquisition (before price collapse reduced the market value of the minted tokens). Bitget suspended FET deposits and withdrawals starting at 06:00 UTC+8 on September 20; KuCoin halted FET deposits; and multiple exchanges were contacted to freeze associated deposits.","heading":"Market Impact: AGIX Collapse","severity":"critical","sources":[{"credibility":2,"name":"SingularityNET Crashes Over 99% In 24 Hours Due To Exploit — Blockzeit","type":"news_article","url":"https://blockzeit.com/singularitynet-crashes-over-99-in-24-hours-due-to-exploit/"},{"credibility":2,"name":"SingularityNET (AGIX) plunges 99% after 260M token mint — Coinotag","type":"news_article","url":"https://en.coinotag.com/singularitynet-agix-plunges-99-after-260m-token-mint"},{"credibility":2,"name":"SingularityNET Bridge Hack Widens: 260M AGIX, 53.8M WMTx Minted, $16.77M Held by Attacker — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/09/21/singularitynet-bridge-hack-widens-260m-agix-53-8m-wmtx-minted-16-77m-held-by-attacker/"},{"credibility":2,"name":"FET Price Tanks After SingularityNET Bridge Exploit Triggers Conversion Pause — Blockonomi","type":"news_article","url":"https://blockonomi.com/fet-price-tanks-after-singularitynet-bridge-exploit-triggers-conversion-pause"}]},{"content":"The first exploit transaction occurred at 20:21 UTC on September 19, 2026. Fetch.ai's first public acknowledgment of converter reports did not occur until 06:51 UTC on September 20 — a gap of more than 10 hours. The Ethereum-side Fetch.ai bridge contract was not paused until 12:51 UTC on September 20, approximately 16.5 hours after the initial exploit. On-chain security firm PeckShield issued a public alert at approximately 09:21 UTC on September 20. Fetch.ai subsequently paused AGIX-to-FET conversions. Fetch.ai confirmed its own core contracts were intact and unaffected, and attributed the incident to SingularityNET bridge infrastructure. World Mobile Chain confirmed that WMTx minting occurred through the same compromised bridge and paused its bridge in response. SingularityNET stated that treasury and exchange wallets were not impacted and that 'holders need take no action,' and noted that pre-exploit snapshots were initiated for WMTx recovery planning. As of reporting on September 21, no comprehensive technical post-mortem had been published by SingularityNET. Bitquery reported that the compromised keys remained unrotated more than 48 hours after the initial exploit, a finding that was independently cited in multiple outlets as a significant ongoing risk.","heading":"Detection Gap and Response Timeline","severity":"high","sources":[{"credibility":2,"name":"SingularityNET Bridge Hack Widens: 260M AGIX, 53.8M WMTx Minted, $16.77M Held by Attacker — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/09/21/singularitynet-bridge-hack-widens-260m-agix-53-8m-wmtx-minted-16-77m-held-by-attacker/"},{"credibility":2,"name":"SingularityNET Bridge Exploit Forces Fetch.ai to Pause AGIX-FET Conversions — Crypto Economy","type":"news_article","url":"https://crypto-economy.com/singularitynet-bridge-exploit-forces-fetch-ai-to-pause-agix-fet-conversions/"},{"credibility":2,"name":"Fetch.ai Confirms SingularityNET Exploit — Coinfomania","type":"news_article","url":"https://coinfomania.com/fetch-ai-confirms-singularitynet-exploit/"},{"credibility":2,"name":"Key Compromise Behind Fetch.ai-Linked Bridge Attack Drives Losses To $16.77M — Metaverse Post","type":"news_article","url":"https://mpost.io/key-compromise-behind-fetch-ai-linked-bridge-attack-drives-losses-to-16-77m/"}]},{"content":"The SingularityNET AGIX/WMTx minting was one component of a broader multi-protocol attack that affected at least four token ecosystems within the Artificial Superintelligence (ASI) Alliance umbrella. Bitquery's on-chain analysis traced approximately 2.3 billion newly created token units across AGIX, NTX (NuNet), WMTx (World Mobile), and CGV to the same attacker cluster. The sequence began with Fetch.ai's TokenConversionManagerV3 drain (8.72M FET), then NTX minting (408.5 million, representing approximately 42% of NuNet's total supply), then AGIX minting (260 million), then WMTx minting (53.8 million). Protos characterized the event as a 'widespread penetration of the interconnected companies' infrastructure,' with the attacker accessing signing keys from multiple entities within the ASI Alliance ecosystem. The incident was reported by Metaverse Post to be the ninth major bridge exploit of 2026, pushing cumulative bridge-related losses for the year past $345 million. SingularityNET, Fetch.ai, and NuNet are all constituent projects of the ASI Alliance, a merger entity formed to pool AI and decentralized infrastructure resources; this shared infrastructure appears to have been the vector through which a single key compromise cascaded across multiple token systems.","heading":"Scope of the Multi-Protocol Attack","severity":"critical","sources":[{"credibility":2,"name":"$2M stolen in triple attack on Fetch.ai, NuNet, and SingularityNET — Protos","type":"news_article","url":"https://protos.com/2m-stolen-in-triple-attack-on-fetch-ai-nunet-and-singularitynet/"},{"credibility":2,"name":"Key Compromise Behind Fetch.ai-Linked Bridge Attack Drives Losses To $16.77M — Metaverse Post","type":"news_article","url":"https://mpost.io/key-compromise-behind-fetch-ai-linked-bridge-attack-drives-losses-to-16-77m/"},{"credibility":2,"name":"Someone minted 2.3 billion tokens in one night using SingularityNET — KuCoin Trends","type":"on_chain","url":"https://www.kucoin.com/news/trends/WMTX/6ab0e4f374fd460007c477f7"}]},{"content":"SingularityNET is a blockchain-based marketplace for AI services, founded by Ben Goertzel. The AGIX token is its legacy utility token, used for payments and governance within the network. SingularityNET is a founding member of the Artificial Superintelligence Alliance (ASI Alliance) alongside Fetch.ai and Ocean Protocol, which undertook a token merger initiative. The AGIX-to-FET conversion bridge targeted in this attack was part of the ASI Alliance's token unification infrastructure, enabling AGIX holders to migrate tokens to the unified ASI token via a Fetch.ai-operated converter contract. The dormant AGIX minter key exploited in this attack dated to 2023, suggesting it was either retained from a prior governance configuration or never decommissioned during the ASI merger transition. No regulatory actions, SEC filings, or law enforcement proceedings related to SingularityNET as an entity have been identified in publicly available sources at the time of this investigation. This incident does not allege misconduct by SingularityNET as an organization; SingularityNET and its associated protocols are the victims of a key-custody breach rather than perpetrators.","heading":"SingularityNET Background and Token Context","severity":"low","sources":[{"credibility":2,"name":"SingularityNET Bridge Exploit Forces Fetch.ai to Pause AGIX-FET Conversions — Crypto Economy","type":"news_article","url":"https://crypto-economy.com/singularitynet-bridge-exploit-forces-fetch-ai-to-pause-agix-fet-conversions/"},{"credibility":2,"name":"SingularityNET Contract Exploit Details and Impact on Fetch.ai — Cryptonomist","type":"news_article","url":"https://en.cryptonomist.ch/2026/09/20/singularitynet-contract-exploit/"}]},{"content":"As of September 21, 2026, the following material questions remain unresolved in publicly available sources: (1) The method by which the attacker obtained the offline conversion-authorizer key has not been publicly disclosed by SingularityNET or Fetch.ai — no post-mortem or incident report had been published as of the latest available reporting. (2) Bitquery reported that the compromised signing keys had not been rotated more than 48 hours after the initial exploit; it is unclear whether this had been remediated by the time of this investigation page's compilation. (3) The dormant 2023 minter key's continued existence in an unrevoked state raises questions about key lifecycle management practices during the ASI Alliance merger transition. (4) Whether affected AGIX token holders will receive any form of restitution or supply correction has not been addressed in official communications reviewed for this investigation. (5) The $289,575 in USDC allegedly drained from a payroll contract (reported by Protos) has not been confirmed or denied in official statements reviewed. Readers should monitor SingularityNET's official channels and any post-mortem publications for updates to these open items.","heading":"Ongoing Risk and Open Questions","severity":"high","sources":[{"credibility":2,"name":"Key Compromise Behind Fetch.ai-Linked Bridge Attack Drives Losses To $16.77M — Metaverse Post","type":"news_article","url":"https://mpost.io/key-compromise-behind-fetch-ai-linked-bridge-attack-drives-losses-to-16-77m/"},{"credibility":2,"name":"$2M stolen in triple attack on Fetch.ai, NuNet, and SingularityNET — Protos","type":"news_article","url":"https://protos.com/2m-stolen-in-triple-attack-on-fetch-ai-nunet-and-singularitynet/"},{"credibility":2,"name":"SingularityNET Bridge Hack Widens: 260M AGIX, 53.8M WMTx Minted, $16.77M Held by Attacker — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/09/21/singularitynet-bridge-hack-widens-260m-agix-53-8m-wmtx-minted-16-77m-held-by-attacker/"}]}],"sources_used":[{"credibility":2,"name":"Key Compromise Behind Fetch.ai-Linked Bridge Attack Drives Losses To $16.77M — Metaverse Post","type":"news_article","url":"https://mpost.io/key-compromise-behind-fetch-ai-linked-bridge-attack-drives-losses-to-16-77m/"},{"credibility":2,"name":"SingularityNET Bridge Hack Widens: 260M AGIX, 53.8M WMTx Minted, $16.77M Held by Attacker — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/09/21/singularitynet-bridge-hack-widens-260m-agix-53-8m-wmtx-minted-16-77m-held-by-attacker/"},{"credibility":2,"name":"Hackers exploit SingularityNET bridge vulnerability, illegally mint $16.77M in AGIX and WMTx — KuCoin News","type":"news_article","url":"https://www.kucoin.com/news/flash/hackers-exploit-singularitynet-bridge-vulnerability-illegally-mint-16-77m-in-agix-and-wmtx"},{"credibility":2,"name":"SingularityNET Bridge Exploit Forces Fetch.ai to Pause AGIX-FET Conversions — Crypto Economy","type":"news_article","url":"https://crypto-economy.com/singularitynet-bridge-exploit-forces-fetch-ai-to-pause-agix-fet-conversions/"},{"credibility":2,"name":"$2M stolen in triple attack on Fetch.ai, NuNet, and SingularityNET — Protos","type":"news_article","url":"https://protos.com/2m-stolen-in-triple-attack-on-fetch-ai-nunet-and-singularitynet/"},{"credibility":2,"name":"PeckShield: Same attacker breached SingularityNET, illicitly minting 260 million AGIX and 53.838 million WMTx — PANews","type":"on_chain","url":"https://panews.io/articles/01a0be2e-f8c9-738c-a585-a4d7708cc32b"},{"credibility":2,"name":"Fetch.ai Confirms SingularityNET Exploit — Coinfomania","type":"news_article","url":"https://coinfomania.com/fetch-ai-confirms-singularitynet-exploit/"},{"credibility":2,"name":"FET Price Tanks After SingularityNET Bridge Exploit Triggers Conversion Pause — Blockonomi","type":"news_article","url":"https://blockonomi.com/fet-price-tanks-after-singularitynet-bridge-exploit-triggers-conversion-pause"},{"credibility":2,"name":"SingularityNET Crashes Over 99% In 24 Hours Due To Exploit — Blockzeit","type":"news_article","url":"https://blockzeit.com/singularitynet-crashes-over-99-in-24-hours-due-to-exploit/"},{"credibility":2,"name":"SingularityNET (AGIX) plunges 99% after 260M token mint — Coinotag","type":"news_article","url":"https://en.coinotag.com/singularitynet-agix-plunges-99-after-260m-token-mint"},{"credibility":2,"name":"SingularityNET Contract Exploit Details and Impact on Fetch.ai — Cryptonomist","type":"news_article","url":"https://en.cryptonomist.ch/2026/09/20/singularitynet-contract-exploit/"},{"credibility":2,"name":"Someone minted 2.3 billion tokens in one night using SingularityNET bridge — KuCoin Trends","type":"on_chain","url":"https://www.kucoin.com/news/trends/WMTX/6ab0e4f374fd460007c477f7"},{"credibility":2,"name":"Fetch.ai, NuNet Hit by $2.01M Exploit as Attacker Inflates NTX Supply 42% — Gokhshtein","type":"news_article","url":"https://gokhshtein.com/news/2026-09-20-fetchai-nunet-hit-by-201m-exploit-as-attacker-inflates-ntx"}],"summary":"SingularityNET is a blockchain-based AI services marketplace whose legacy AGIX token and associated cross-chain bridge (linking Ethereum and Cardano) were targeted in a coordinated key-compromise attack between September 19 and 21, 2026. An attacker who had obtained the bridge's offline conversion-authorizer signing key — and separately a dormant 2023 AGIX minter key — used valid cryptographic signatures to mint 260 million AGIX and 53.8 million WMTx on Ethereum, with total attacker-controlled value reaching approximately $16.77 million; AGIX collapsed more than 99% in 24 hours, wiping an estimated $93 million in market capitalization. The incident was part of a broader multi-protocol attack that also drained 8.72 million FET from Fetch.ai's TokenConversionManagerV3 and minted 408.5 million NTX on NuNet, all attributed by on-chain security firm PeckShield to the same threat actor.","timeline":[{"date":"2026-09-19","event":"First exploit transaction recorded at 20:21 UTC: attacker calls conversionIn on Fetch.ai's TokenConversionManagerV3, draining 8,721,530 FET (~$1.55M) to an attacker-controlled wallet.","source":"Crypto Times / Metaverse Post","source_url":"https://www.cryptotimes.io/2026/09/21/singularitynet-bridge-hack-widens-260m-agix-53-8m-wmtx-minted-16-77m-held-by-attacker/"},{"date":"2026-09-19","event":"Approximately 29 minutes after the FET drain (approximately 20:50 UTC), the attacker mints 408.5 million NTX tokens, representing approximately 42% of NuNet's total supply.","source":"Metaverse Post / Crypto Times","source_url":"https://mpost.io/key-compromise-behind-fetch-ai-linked-bridge-attack-drives-losses-to-16-77m/"},{"date":"2026-09-20","event":"Attacker mints 260 million AGIX tokens on Ethereum using a compromised bridge authorizer key and a separately compromised dormant 2023 AGIX minter key.","source":"PeckShield via PANews / KuCoin","source_url":"https://panews.io/articles/01a0be2e-f8c9-738c-a585-a4d7708cc32b"},{"date":"2026-09-20","event":"Attacker mints 53.838 million WMTx tokens on Ethereum through the same compromised bridge infrastructure.","source":"PeckShield via PANews / Crypto Times","source_url":"https://panews.io/articles/01a0be2e-f8c9-738c-a585-a4d7708cc32b"},{"date":"2026-09-20","event":"Fetch.ai issues first public acknowledgment of converter reports at 06:51 UTC — more than 10 hours after the initial exploit transaction.","source":"Crypto Times","source_url":"https://www.cryptotimes.io/2026/09/21/singularitynet-bridge-hack-widens-260m-agix-53-8m-wmtx-minted-16-77m-held-by-attacker/"},{"date":"2026-09-20","event":"PeckShield publicly attributes all minting activity to a single attacker cluster and reports total holdings of approximately $16.77M at 09:21 UTC.","source":"PANews / KuCoin","source_url":"https://panews.io/articles/01a0be2e-f8c9-738c-a585-a4d7708cc32b"},{"date":"2026-09-20","event":"Fetch.ai pauses its Ethereum-side bridge contract at approximately 12:51 UTC as a precautionary measure; AGIX-to-FET conversions suspended. Bitget suspends FET deposits and withdrawals; KuCoin halts FET deposits.","source":"Crypto Times / Crypto Economy","source_url":"https://crypto-economy.com/singularitynet-bridge-exploit-forces-fetch-ai-to-pause-agix-fet-conversions/"},{"date":"2026-09-20","event":"AGIX token price collapses from approximately $0.0775 to $0.0006841 — a decline of more than 99% — within 24 hours, wiping an estimated $93 million in market capitalization.","source":"Blockzeit / Coinotag","source_url":"https://blockzeit.com/singularitynet-crashes-over-99-in-24-hours-due-to-exploit/"},{"date":"2026-09-20","event":"Fetch.ai confirms its core contracts were not affected; SingularityNET states treasury and exchange wallets are not impacted and that holders need take no action. No comprehensive incident report published.","source":"Coinfomania / Blockonomi","source_url":"https://coinfomania.com/fetch-ai-confirms-singularitynet-exploit/"},{"date":"2026-09-21","event":"Bitquery on-chain monitoring reports that the compromised conversion authorizer key has not been rotated and the stolen NuNet minter role has not been revoked — more than 48 hours after the initial exploit. Attacker's realized profit reaches approximately $2.25M through token sales.","source":"Metaverse Post / Crypto Times","source_url":"https://mpost.io/key-compromise-behind-fetch-ai-linked-bridge-attack-drives-losses-to-16-77m/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 66330dc1-9b64-47d6-a638-f49de2a3d997copy