Bridge Exploit Triggers Multi-Million Dollar Token Collapse

On September 20, 2026, a malicious actor manipulated a bridge contract vulnerability on the Ethereum network to illicitly generate hundreds of millions of digital assets. The breach targeted SingularityNET infrastructure, expanding an ongoing security incident into a major cross-ecosystem event.

Taking advantage of the network flaw, the exploiter unauthorizedly created massive quantities of counterfeit cryptocurrency. In an update detailing the incident, blockchain security firm PeckShieldAlert reported, "The same exploiter has exploited @SingularityNET, resulting in the unauthorized minting of 260M $AGIX & 53.838M $WMTx on Ethereum."

Shortly after the bridge exploit, PeckShield analysts calculated that the malicious address contained cryptocurrency valued at roughly $16.77 million. The on-paper holdings prominently featured 198.3 million AGIX, valued at approximately $14.42 million, alongside 33.538 million WMTx (World Mobile Token), which was estimated at $627,350. Additionally, the attacker’s wallet held 649 ETH, worth $1.67 million.

Realized Profits Fall Short

Despite the high estimated value of the newly minted assets, the hacker’s actual financial gain was merely a fraction of the unrealized total. On-chain data analysis conducted by Bitquery and Protos indicated that the attacker ultimately realized a profit of only about $2.25 million.

The stark discrepancy between the on-paper holdings and the actual realized gains was driven by immediate market reactions to the sudden artificial supply inflation. Detailing the market fallout, a Protos editorial stated, "With considerable portions of their supply made up of freshly minted counterfeit tokens, the prices of minted assets have collapsed."

Consequently, the bulk of the exploiter's $2.25 million realized profit did not come from offloading the newly fabricated AGIX or WMTx assets. Instead, the majority of the usable gains originated from swapping genuine, pre-existing tokens. The attacker converted legitimate FET tokens into 523 ETH, securing approximately $1.2 million of their total realized profit through this method rather than by successfully selling the counterfeit assets.

A Widening Attack Cluster

The SingularityNET breach was the continuation of a broader series of exploits that commenced on September 19, 2026. Prior to hitting the Ethereum bridge contract, the identical malicious actor targeted a Fetch.ai conversion contract, completely draining 8.7 million FET valued at $1.53 million. Furthermore, the exploiter utilized a compromised NuNet account to issue an additional 408.5 million NTX tokens.

The wider incident also involved entities and assets tied to the Artificial Superintelligence Alliance and Cogito (CGV), spreading the impact across multiple protocols. The cascading nature of the incident highlights the systemic risks inherent in connected blockchain architecture. Regarding the expanded attack, a Cubed editorial observed, "The widening scope underscores how bridge infrastructure can amplify a single compromised key into cross-ecosystem damage."