SingularityNET Bridge Exploit Drains $16.77M in Illicit Token Mints
TREE NEWS reports: An attacker exploited a vulnerability in SingularityNET’s bridge contract on Ethereum, illegally minting 260 million AGIX tokens and 53.838 million WMTx tokens. The same attacker currently holds roughly $16.77 million in crypto assets: 198.3 million AGIX (about $14.42 million), 649 ETH (about $1.67 million), and 33.538 million WMTx (about $627,000). The incident marks one of the largest bridge-related exploits of the year and raises fresh questions about the security assumptions underpinning cross-chain infrastructure.
How the Attack Unfolded
Bridge contracts typically lock assets on one chain and mint representations on another. If mint authorization is improperly validated, an attacker can fabricate tokens without depositing collateral. In this case, the exploiter appears to have triggered the mint function directly, creating hundreds of millions of tokens out of thin air. Because AGIX and WMTx trade on centralized and decentralized venues, the illicit supply could be sold into thin liquidity, pressuring prices and harming legitimate holders.
Market and Industry Implications
- Liquidity shock: A sudden 260 million AGIX mint could overwhelm order books, especially if the attacker bridges or swaps tokens across chains.
- Governance risk: SingularityNET’s decentralized governance model may face pressure to freeze, burn, or snapshot balances to neutralize the minted supply.
- Bridge security scrutiny: The exploit reinforces a pattern of bridge hacks that have collectively cost the industry billions, renewing calls for audits, rate limits, and real-time monitoring.
- Contagion concerns: WMTx, tied to the World Mobile ecosystem, now shares the attacker’s wallet, potentially dragging an unrelated project into the fallout.
What Comes Next
SingularityNET has yet to detail remediation plans publicly. Likely responses include pausing the bridge, coordinating with exchanges to blacklist attacker addresses, and executing a token burn or hard fork to restore supply integrity. For the broader DeFi sector, the incident is a reminder that bridge design remains a systemic weak point. Projects that rely on mint-and-lock architectures should consider supply caps, multi-signature minting, time-locked withdrawals, and independent circuit breakers. Until those safeguards become standard, cross-chain bridges will continue to be the most attractive target for well-capitalized attackers.
