{
 "tag": "asi-alliance",
 "name": "Asi Alliance",
 "group": "Other",
 "incidents": [
  {
   "slug": "singularitynet-bridge-signing-key-compromise-sep-2026",
   "title": "SingularityNET bridge keys abused after cloud breach: 8.72M FET released, billions of tokens minted",
   "url": "https://drains.watch/i/singularitynet-bridge-signing-key-compromise-sep-2026",
   "json": "https://drains.watch/i/singularitynet-bridge-signing-key-compromise-sep-2026.json",
   "status": "live",
   "severity": "critical",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "chains": [
    "ethereum",
    "bsc"
   ],
   "method": "key-leak",
   "product": "SingularityNET / ASI Alliance bridge and conversion contracts (also NuNet, Cogito, Rejuve and World Mobile tokens)",
   "tags": [
    "ethereum",
    "bsc",
    "key-leak",
    "bridge",
    "cloud-compromise",
    "signing-key",
    "unauthorized-mint",
    "singularitynet",
    "asi-alliance",
    "nunet",
    "fet",
    "agix"
   ],
   "amountUsd": 2290000,
   "victims": null,
   "startedAt": "2026-09-19",
   "closedAt": null,
   "updatedAt": "2026-09-25T12:00:00Z",
   "summary": "An unauthorized party got into part of SingularityNET's cloud infrastructure and on 19-20 September 2026 used a compromised authorizer signature and NuNet's mint authority to release 8.72M FET from a bridge and mint about 2.3 billion AGIX, NTX, WMTX and CGV. Sixteen wallets, four labelled as SingularityNET or NuNet staff, were swept before the minting. Headlines cited $16.77M, but Rekt's transaction-level count found about $2.29M in sellable proceeds because most minted tokens could not be sold. Bridges and converters are offline and AGIX is being replaced, so holders should wait for official migration steps."
  }
 ],
 "changes": [
  {
   "incident": "singularitynet-bridge-signing-key-compromise-sep-2026",
   "incidentTitle": "SingularityNET bridge keys abused after cloud breach: 8.72M FET released, billions of tokens minted",
   "severity": "critical",
   "status": "live",
   "threatStatus": "partly-contained",
   "date": "2026-09-25",
   "title": "Rekt reported SingularityNET had revoked the access, shut the bridges and converters, paused AGIX and NTX transfers on Ethereum and planned to retire AGIX; the attacker's hub still held about 433 ETH.",
   "sourceUrl": "https://rekt.news/singularitynet-rekt",
   "url": "https://drains.watch/i/singularitynet-bridge-signing-key-compromise-sep-2026"
  },
  {
   "incident": "singularitynet-bridge-signing-key-compromise-sep-2026",
   "incidentTitle": "SingularityNET bridge keys abused after cloud breach: 8.72M FET released, billions of tokens minted",
   "severity": "critical",
   "status": "live",
   "threatStatus": "partly-contained",
   "date": "2026-09-20",
   "title": "Unauthorized minting began around 03:13 UTC, creating about 2.3 billion AGIX, NTX, WMTX and CGV.",
   "sourceUrl": "https://rekt.news/singularitynet-rekt",
   "url": "https://drains.watch/i/singularitynet-bridge-signing-key-compromise-sep-2026"
  },
  {
   "incident": "singularitynet-bridge-signing-key-compromise-sep-2026",
   "incidentTitle": "SingularityNET bridge keys abused after cloud breach: 8.72M FET released, billions of tokens minted",
   "severity": "critical",
   "status": "live",
   "threatStatus": "partly-contained",
   "date": "2026-09-19",
   "title": "A compromised authorizer signature released 8,721,530.40 FET from the bridge, cleared at 20:21 UTC, which the attacker swapped for 522.78 ETH.",
   "sourceUrl": "https://rekt.news/singularitynet-rekt",
   "url": "https://drains.watch/i/singularitynet-bridge-signing-key-compromise-sep-2026"
  }
 ]
}