On September 19–20, 2026, the SingularityNET Ethereum–Cardano bridge was compromised when an attacker with admin signing keys minted millions of unbacked tokens (FET, AGIX, WMTX, NTX, CGV) without burning collateral, draining approximately 8.7 million FET and creating billions in unsupported supply across tokens. The bridge was subsequently shut down as a precaution, though closing the website did not revoke the compromised keys that enabled the unauthorized minting.
A SingularityNET exploit initially involving 8.72 million FET tokens expanded significantly when researchers discovered the same attacker group was linked to 260 million AGIX and 53.8 million WMTx illegally minted tokens, totaling approximately 2.3 billion across multiple tokens valued at $16.77 million in Ethereum assets. The vulnerability affected SingularityNET and an Ethereum-Cardano bridge rather than direct smart contract attacks.