PublicAML

SingularityNET Cloud Infrastructure Breach Results in $2.29M Loss

An attacker compromised SingularityNET's cloud infrastructure, leading to significant financial losses. The incident involved unauthorized mints of various tokens and a substantial drain of funds.

Our full investigation: Fetch.ai, NuNet, World Mobile: what the attacker sold, and the 433 ETH and 200 million WMTX he still holds

An attacker accessed SingularityNET’s cloud infrastructure, which allowed for the unauthorized minting of tokens. Valid bridge signatures were exploited to authorize mints of AGIX, WMTX, and CGV, while NTX was minted directly. Additionally, the attacker drained 8.72 million FET from the system, resulting in gross liquid proceeds of $2.29 million traced back to the incident.

The breach highlights vulnerabilities in the handling of signatures, as the incident raises questions about the verification process for these signatures. When a signature is treated as proof, it is crucial to have mechanisms in place to ensure its authenticity and prevent misuse. The specifics of the chain involved in this incident were not stated, which limits the ability to trace the transactions further.

The on-chain record indicates that significant amounts of funds were moved as a result of the attack, but without details on the specific addresses involved, further tracing of the stolen assets is not possible. The incident underscores the importance of robust security measures in cloud infrastructure to protect against unauthorized access and potential financial losses.

Addresses in this incident

Roles are attributed to the source that stated them. Addresses without an attributed role are listed because coverage mentioned them, not because we assign them a part in the incident.

Sources

Share:XTelegramLinkedIn
SingularityNET Cloud Infrastructure Breach Results in $2.29M Loss | PublicAML