SingularityNET Bridge Infrastructure Has Been Exploited

An attacker compromised cloud infrastructure to mint billions of unauthorized tokens, realizing millions in proceeds.

Updated on Sept. 26, 2026 in Financial Crime

Bold flat-color editorial illustration of a fractured stone archway, representing the systemic failure of cross-chain infrastructure.
An attacker exploited SingularityNET bridge infrastructure, minting 2.3 billion unauthorized tokens and netting over $2 million in realized proceeds through the breach. AI Illustration. Upload story photo >

Live Poll

Do you trust the security measures currently in place for cross-chain crypto bridge platforms?

An attacker exploited SingularityNET bridge infrastructure by compromising cloud-based signing and minting privileges. This unauthorized access resulted in the creation of 2.3 billion tokens across multiple assets, leading to $2.29 million in realized proceeds.

Why it matters

The breach highlights systemic vulnerabilities in cross-chain bridge security, specifically regarding the failure to independently verify underlying token burns. The incident underscores the risks inherent in centralized cloud infrastructure management within decentralized finance networks.

SingularityNET has revoked the compromised access and disabled the affected bridges following the unauthorized minting of over 2.3 billion tokens. The organization is currently planning an independent security review to address the breach.

The players

SingularityNET

This is a decentralized artificial intelligence marketplace and project that coordinates bridge infrastructure across blockchain networks.

The details

The attacker leveraged compromised cloud infrastructure to bypass security protocols, allowing for the unauthorized minting of nearly 900 million SingularityNET tokens and hundreds of millions of Fetch.ai, NuNet, World Mobile, and Cogito tokens. Because the contracts failed to verify cross-chain burns, the attacker was able to exchange assets into approximately 522.78 Ether and $362,075 in stablecoins.

Timeline

  1. September 19, 2026: Attackers exploited the bridge infrastructure.

  2. September 20, 2026: Unauthorized AGIX token minting concluded.

  3. September 22, 2026: Attacker wallet balance reached 742.7 ETH equivalent.

Legal Context

This breach follows the pattern of the 2022 Ronin Network bridge exploit, where flaws in cross-chain validation were leveraged for illicit gain. It highlights the ongoing struggle to secure interoperable blockchain infrastructure against centralized points of failure.

Users of the affected bridge networks should remain alert to any further security advisories issued by the platform. The incident serves as a reminder to verify token contract security before participating in cross-chain transactions.

The takeaway

Blockchain users should maintain caution when interacting with cross-chain bridges that rely on centralized cloud credentials. Always prioritize platforms that utilize audited, decentralized verification protocols to mitigate the risk of unauthorized token minting.

Further reading

For more context on how digital assets are protected against unauthorized access, explore our Financial Crime section.

Source note: This article includes information reported by TokenPost.

Live Poll

Do you trust the security measures currently in place for cross-chain crypto bridge platforms?