[A wallet hacked into two projects, and the coin has fallen to an all-time low 😱]
Join X Mr.'s fan group chat from the homepage 🔥
One wallet address moved two projects within a few hours.
Together it's almost $2 million.
Security firm Blockaid has called this out.
The targets are Fetch.ai and NuNet.
One builds AI agents, the other a compute network.
Both are fairly well-known in the crypto world.
First, let's look at Fetch.ai.
The attacker used a valid signature.
Each contract call empties the pool.
That amounted to about $1.56 million.
No brute-force cracking, no complex scripts.
The signature was real, and the permissions were correct.
Over at NuNet, it was even more direct.
From the same wallet, they minted $450,000 worth of NTX.
Getting the money was even easier.
Once the funds were in hand, he didn't keep them.
He swapped for 546 ETH, roughly $1.44 million.
Switching into mainstream coins makes tracking and freezing much harder.
The two tokens reacted very differently.
NTX plunged over 70%, smashing to a new all-time low.
FET fell only 5%, basically tracking the broader market.
And that's the most painful part.
When it drops with the overall market, you can still wait for a rebound.
But once a seven-tenths drop is caused by the flaw, trust is hard to rebuild.
DeFi has been looking bleak this month.
There have been 18 incidents, with losses exceeding $333 million.
Liquid alone accounted for $320 million.
Three days ago, a lending protocol just suffered an oracle attack.
It lost $3.5 million.
Now it's back to token conversion contracts.
These incidents share a common thread.
The contract code itself was not written wrong.
The problem is in the “identity verification” step.
So far, both affected parties have not publicly responded.
Whether the money can be recovered—no one dares to say.
📌 The signature wasn't cracked, but the permissions were stolen and used—that's the most expensive kind of vulnerability.
If signatures are being misused like this, who will be next?
Join X Mr.'s fan group chat from the homepage 🔥
One wallet address moved two projects within a few hours.
Together it's almost $2 million.
Security firm Blockaid has called this out.
The targets are Fetch.ai and NuNet.
One builds AI agents, the other a compute network.
Both are fairly well-known in the crypto world.
First, let's look at Fetch.ai.
The attacker used a valid signature.
Each contract call empties the pool.
That amounted to about $1.56 million.
No brute-force cracking, no complex scripts.
The signature was real, and the permissions were correct.
Over at NuNet, it was even more direct.
From the same wallet, they minted $450,000 worth of NTX.
Getting the money was even easier.
Once the funds were in hand, he didn't keep them.
He swapped for 546 ETH, roughly $1.44 million.
Switching into mainstream coins makes tracking and freezing much harder.
The two tokens reacted very differently.
NTX plunged over 70%, smashing to a new all-time low.
FET fell only 5%, basically tracking the broader market.
And that's the most painful part.
When it drops with the overall market, you can still wait for a rebound.
But once a seven-tenths drop is caused by the flaw, trust is hard to rebuild.
DeFi has been looking bleak this month.
There have been 18 incidents, with losses exceeding $333 million.
Liquid alone accounted for $320 million.
Three days ago, a lending protocol just suffered an oracle attack.
It lost $3.5 million.
Now it's back to token conversion contracts.
These incidents share a common thread.
The contract code itself was not written wrong.
The problem is in the “identity verification” step.
So far, both affected parties have not publicly responded.
Whether the money can be recovered—no one dares to say.
📌 The signature wasn't cracked, but the permissions were stolen and used—that's the most expensive kind of vulnerability.
If signatures are being misused like this, who will be next?
