NuNet Hack
What happened
On September 19, 2026, an attacker used NuNet's compromised minter key on Ethereum to mint 408,532,878 NTX, about 42% of the token's documented supply, in a single transaction. The key belonged to the NuNet deployer account and had reportedly been dormant since March 2023. The minted tokens were worth roughly $452,000-$463,000 at pre-crash prices; the attacker dumped more than 217 million NTX through DEX liquidity and routed 10 million through Mayan for cross-chain conversion, and NTX fell by more than 70% (some trackers reported over 90%) to an all-time low within a day.
The mint came about 29 minutes after the same wallet cluster drained about 8.7M FET from the Fetch.ai / SingularityNET token converter using a stolen bridge authorizer key, bringing the combined haul to about $2 million. Blockaid, PeckShield and SlowMist flagged the activity. How the NuNet key was compromised has not been disclosed, NuNet had not issued a public statement when the incident was reported, and about five hours after the attack the minter role had reportedly not yet been revoked.
How it happened
- The attacker obtained the private key of NuNet's deployer account, which still held minting rights on the
NTXcontract (how the key leaked has not been disclosed). - At about 20:50 UTC on September 19, 2026 the attacker minted 408,532,878
NTXto their own address in transaction0xe14442f6171d8a652e79d44336e58c00cdab271bdb69c668493d420e03ee13ab. - More than 217 million
NTXwere sold into decentralized liquidity pools, draining them; later sales of 38.55 million NTX into the depleted pools returned little, and 10 million NTX went through Mayan for cross-chain conversion. - Proceeds were consolidated with the FET stolen from the Fetch.ai converter; about 546 ETH (~$1.44 million) was swapped from the combined FET and NTX proceeds.
Protocol details
Evidence
- analysis DeFiLlama defillama.com
- analysis One wallet links $1.55 million FetchAI theft to massive 408.5 million NTX mint (CryptoSlate) cryptoslate.com
- analysis Fetch.ai and NuNet hit in attacks linked to a compromised private key (Cryptopolitan) cryptopolitan.com
- analysis Fetch.ai NuNet Exploit Drains $2M, Hits Tokens Hard (The Cryptonomist, Sep 20, 2026) en.cryptonomist.ch
- analysis $2 Million AI-Crypto Exploit: 8.72M FET Drained, 408.5M NTX Minted (Crowdfund Insider) crowdfundinsider.com
- analysis nunet.io page nunet.io nunet.io
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.