Hack history / 2026 / Hack or exploit
Fetch.ai
Hack or exploit on Sep 19, 2026 · Private Key Compromised
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$1.5M
dollars at the time
Returned
none listed
as the sources state it
Rank
#786
among thefts by dollars lost
What happened
Fetch.ai’s TokenConversionManagerV3 conversionIn() relied on an ECDSA signature from a single authorizer as its principal authorization mechanism. After obtaining that authorizer’s private key, the attacker signed a fresh conversion message for an attacker-controlled recipient and called conversionIn(). Unlike conversionOut(), the function lacked the checkLimits(amount) restriction and did not independently require proof that corresponding assets had been burned or locked on the other side of the conversion. The valid signature was therefore sufficient to release the converter’s entire remaining FET inventory in one transaction
Details
- Date
- Sep 19, 2026
- Kind
- Hack or exploit
- Method
- Private Key Compromised
- How in
- Keys, accounts and infrastructure
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Fetch.ai 2023 · Hack or exploit · undisclosed
Fetch.ai 2021 · Hack or exploit · $2.6M
Step Finance 2026 · Hack or exploit · $40M
Humanity 2026 · Hack or exploit · $32M
Ostium 2026 · Hack or exploit · $23.8M
Fetch.ai 2021 · Hack or exploit · $2.6M
Step Finance 2026 · Hack or exploit · $40M
Humanity 2026 · Hack or exploit · $32M
Ostium 2026 · Hack or exploit · $23.8M
Cite this page
SwanBluechip, "Fetch.ai hack, Sep 19, 2026: $1.5M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht2034eb5b9b/ (data as of 2026-10-31).