SingularityNET Cross-Chain Bridge Exploited in Coordinated Attack
TREE NEWS reports: The same attacker previously linked to exploits against Fetch.ai and NuNet has struck again, this time targeting SingularityNET. The attacker unauthorizedly minted 260 million AGIX tokens and 53.838 million WMTx tokens on the Ethereum chain. World Mobile Chain has separately confirmed that the SingularityNET cross-chain bridge was exploited, leading to the illegal minting of WMTx on Ethereum.
The attacker currently holds approximately $16.77 million in crypto assets, including 198.3 million AGIX (roughly $14.42 million), 649 ETH (about $1.67 million), and 33.538 million WMTx (approximately $627,400). The scale of the unauthorized minting raises serious questions about bridge security and token supply integrity across the SingularityNET ecosystem.
Industry Analysis: A Pattern of Bridge Vulnerabilities
Cross-chain bridges have become the single most exploited category in decentralized finance, accounting for billions in cumulative losses. The fact that the same actor allegedly targeted Fetch.ai, NuNet, and now SingularityNET suggests either a coordinated campaign against a specific ecosystem or a systemic vulnerability shared across these interconnected projects.
- Bridge architecture risk: Bridges that rely on validator sets or multisig schemes remain prime targets for private key compromises and logic exploits.
- Token supply integrity: Unauthorized minting dilutes holders and can crater token prices if the attacker dumps onto exchanges.
- Ecosystem contagion: SingularityNET, Fetch.ai, and NuNet are all part of the Artificial Superintelligence Alliance, meaning a breach in one protocol can erode confidence across the entire alliance.
Forward-Looking Perspective
The immediate priority for SingularityNET and World Mobile Chain is to coordinate a response: freezing affected contracts where possible, alerting exchanges to blacklist the attacker’s addresses, and initiating a token burn or snapshot to restore supply integrity. The longer-term lesson is that bridge security must be treated as critical infrastructure, with formal verification, rate limiting, and decentralized validation as baseline requirements.
Regulators are increasingly focused on DeFi exploits, and repeated attacks on the same ecosystem could invite scrutiny of how these projects secure user funds. For investors, the episode underscores the importance of assessing bridge risk before allocating capital to tokens whose supply can be manipulated through a single point of failure.
