Blockaid links Fetch.ai FET drain and NuNet NTX mint in ~$2M attack
By Crypto Wire
September 19, 2026
Security firms Blockaid and PeckShield say the same attacker hit two AI-compute crypto projects on September 19, walking away with close to $2 million combined. Secondary wraps from Coinpedia and Blockchain.News attribute a Fetch.ai token-converter drain of about 8.7 million FET worth roughly $1.53–$1.54 million, then unauthorized minting of about 408.5 million NTX worth roughly $452,000–$463,000 through NuNet’s deployer path.
The shared wallet that received the FET haul is what researchers use to link both hits to one actor. Blockaid published exploiter addresses and an example transaction so exchanges and other projects can flag further movement. Rug Room will stick to those attributed figures rather than invent a full post-mortem the teams have not yet signed.
Why NFT and marketplace desks should care is wallet hygiene, not AI branding. Collectors who keep approvals, converter contracts, and deployer keys in the same operational stack that funds OpenSea or Magic Eden bids inherit the same failure modes: one compromised signing path or weak authorization check can drain settlement assets that were supposed to buy floors. Treat this as a settlement-security story adjacent to NFT custody, not as a collection-floor chart that somehow proves every AI token is toxic.
Blockchain.News places the Fetch.ai converter drain on Ethereum at contract 0xaea46a60368a7bd060eec7df8cba43b7ef41ad85 and tallies the combined haul near $2.01 million when the NTX mint is included. Coinpedia adds that a large portion of proceeds was swapped into about 546 ETH worth roughly $1.44 million—a common laundering step that makes freezes harder. Those are researcher and desk attributions, not 8bitcrypto on-chain audits or a claim that every FET holder lost that much.
Token tape reacted hard in the secondary coverage. NuNet’s NTX was reported down as much as 65–70% after the unauthorized mint, while FET was cited around a 10% drop. Unauthorized minting is especially brutal for holders because it dilutes supply at the same moment stolen inventory hits the market. Until the projects publish official incident notes, treat percentage moves as tracker snapshots, not final settlement of losses or a prediction for NFT bid currency overnight.
Root-cause language still disagrees across desks. Coinpedia frames a recurring permission-structure weakness that can let one compromised access path drain one protocol and mint on another. CoinFomania, citing SlowMist commentary, discusses TokenConversionManagerV3 authorization checks and a possible leaked signing key. Rug Room will not pick a winner between those hypotheses until Fetch.ai or NuNet posts a primary statement. What is solid today is the attributed loss size, the shared-wallet link, and the ETH conversion step researchers flagged for exchange screening.
As of the Coinpedia wrap, neither Fetch.ai nor NuNet had issued an official response. Security researchers urged holders and active users to stay cautious until the teams confirm what broke and whether related contracts remain safe. Collectors with FET or NTX sitting in hot wallets used for NFT shopping should revoke unnecessary approvals and wait for primary guidance before interacting with converter or deployer-linked contracts that share the same signing surface as marketplace wallets.
Keep this story separate from other September Rug Room tape. WaterPlum’s Contagious Interview advisory and the TRM fake-Claude YouTube bot drains are already logged on 8bitcrypto under different topic keys. Tonight’s Fetch–NuNet cluster is a fresh converter-and-mint double hit attributed to Blockaid and PeckShield, not a sequel to those social-engineering campaigns. Mixing the incidents blurs which defenses actually matter for the next wallet checklist.
Attribute the $1.53–$1.54 million FET drain, 8.7 million FET figure, 408.5 million NTX mint, $452,000–$463,000 NTX value, ~$2–$2.01 million combined haul, 546 ETH conversion, NTX 65–70% and FET ~10% tape, converter address, and Blockaid/PeckShield attribution to Coinpedia, Blockchain.News, ChainCatcher, and the researcher posts they cite. Do not invent confirmed TVL impact, a completed recovery, or an NFT-floor cascade. Rug Room reads the double hit as a reminder that AI-agent branding does not harden authorization paths—and that NFT bid currency still sits on the same Ethereum settlement surface those converters touch.
Disclaimer: This article is provided for informational and educational purposes only. It does not constitute financial, investment, legal, or trading advice. The NFT market is highly volatile, and past performance is not indicative of future results. Readers should conduct their own research and consult qualified professionals before making any decisions related to digital assets. The cover image for this article may have been created using artificial intelligence (AI).
