WEMIX faced a new security breach on July 26, resulting in over $724,000 stolen. The attacker gained owner-level privileges on the WEMIX$ stablecoin contract and minted roughly 5.23 million tokens without permission. These tokens were quickly converted into 30,736 WEMIX and 724,198 USDC.e, then moved across Ethereum and BNB Smart Chain networks.
Immediate Impact and Response
Following the unauthorized minting, the stolen assets were partially swapped into Ether and Tether's USDT and distributed across multiple wallets. Some funds landed in centralized exchanges, prompting WEMIX to alert these platforms for rapid asset freezing. Although several exchanges have frozen addresses linked to the attacker, WEMIX has not disclosed exact recovery figures or named the exchanges involved.
In the wake of the incident, WEMIX halted all bridge operations on its WEMIX3.0 network, including Chainlink CCIP and the PLAY Bridge. Trading in liquidity pools associated with WEMIX$ was paused, foundation liquidity was withdrawn, and the PNIX decentralized exchange along with the WEMIX$ Module were suspended. The company aims to reassess contract permissions as it investigates the breach’s root cause.
Context and Market Reaction
The breach struck while WEMIX was phasing out WEMIX$ in favor of USDC.e, especially in gaming services where the transition was meant to culminate in April. CoinGecko reported WEMIX$ suffered a near 99% weekly price drop after the exploit, plunging to its all-time low. This marks the second major hack within two years, recalling a 2025 attack that drained about $6 million and triggered delisting from major South Korean exchanges.
The WEMIX incident highlights rising security concerns for blockchain networks utilizing smart contract privileges. Emergency measures remain active as investigations continue. Earlier this year, regulatory efforts intensified to combat crypto-sector risks, with lawmakers revising measures to address illicit activities linked to complex cyberattacks on digital assets.
