Two Protocols, One Wallet: How a Single Exploiter Hit Fetch.ai and NuNet
TREE NEWS reports: A single attacker has been linked to exploits affecting Fetch.ai (FET) and NuNet (NTX), with roughly $2 million in assets involved across the two incidents. Blockchain security firms tied both events to the same wallet address, suggesting a coordinated campaign rather than opportunistic, unrelated hacks. The fallout was severe for NuNet: its NTX token lost more than 70% of its value and touched an all-time low on September 20.
What Happened
The exploits targeted two projects operating in the decentralized AI and compute space. The attacker used the same infrastructure and wallet across both attacks, pointing to a deliberate, repeatable playbook. While the exact technical vector remains under investigation, the pattern is familiar: identify a privileged function or bridge weakness, drain liquidity or user funds, then route proceeds through mixers or cross-chain bridges to obscure the trail.
The market reaction was immediate. FET holders braced for volatility, while NTX collapsed under the weight of panic selling and thin liquidity. An all-time low for NTX signals that confidence in the protocol’s short-term security has been badly damaged.
Why This Matters for DeFi and AI-Crypto
The Fetch.ai and NuNet incidents sit at the intersection of two hot narratives: decentralized AI infrastructure and real-world utility tokens. Both projects pitch themselves as building blocks for autonomous agents and distributed compute. That makes them attractive to investors — and equally attractive to attackers, because their token economies often rely on complex staking, bridging, and treasury mechanics that are hard to secure.
- Shared attack surface: When multiple projects share tooling, auditors, or bridge infrastructure, a single vulnerability can cascade across ecosystems.
- Token reflexivity: Exploits hit price first, then confidence. NTX’s 70% drawdown shows how quickly a token can lose its entire speculative premium.
- Security budget mismatch: AI-crypto projects often spend more on marketing than on audits, monitoring, and incident response.
The Bigger Picture
2024 and 2025 have seen a steady drumbeat of exploits, but the notable shift is toward repeat attackers who reuse wallets and techniques. That suggests the barrier to entry for these attacks is falling, while defense remains expensive and fragmented. For DAOs and token holders, the lesson is uncomfortable: decentralization does not automatically mean security, and governance votes cannot patch a live exploit in real time.
Expect increased pressure on projects to adopt real-time monitoring, circuit breakers, and insurance-style coverage. Exchanges may also tighten listing standards for AI-crypto tokens, demanding proof of audits and treasury controls before providing liquidity.
What to Watch Next
Investigators will likely trace the stolen funds through bridges and mixers, and some may be recovered if centralized exchanges freeze related deposits. NuNet’s team faces a credibility test: how quickly it can publish a post-mortem, compensate affected users, and rebuild trust. Fetch.ai, with a larger treasury and broader ecosystem, may weather the storm better — but its reputation as a secure AI infrastructure layer is now on the line.
For investors, the takeaway is clear: in the AI-crypto convergence trade, security is not a footnote — it is the product. Protocols that cannot protect user funds will struggle to attract the capital needed to build the decentralized compute economy they promise.
