South Korea’s Wemade-backed WEMIX mentioned an attacker seized proprietor privileges on a wise contract tied to its WEMIX$ stablecoin and used that entry to mint roughly 5.23 million WEMIX$ tokens with out authorization.
The attacker swapped the illicit mint for 30,736 WEMIX and 724,198 USDC.e, primarily based on a preliminary incident replace WEMIX posted Sunday. The breach compelled WEMIX to droop each bridge and liquidity pool tied to its WEMIX3.0 community whereas the corporate works with exchanges to hint the place the funds went.
The Contract Takeover Behind the Illicit WEMIX$ Mint
The irregular transactions started at 9:17 UTC on Sunday, when the attacker gained management of the contract governing WEMIX$ issuance and minted tokens that had no enterprise current. That units this incident other than WEMIX’s February 2025 breach, which got here from stolen authentication keys relatively than a compromised good contract, in line with Cointelegraph.
The attacker then bridged the transformed USDC.e to Ethereum and BNB Sensible Chain, exchanged it for property together with Ether and Tether’s USDT, and unfold the funds throughout a number of wallets, with some deposits touchdown on centralized exchanges. KuCoin’s information desk individually put the unauthorized mint at 5,225,525 WEMIX$, matching WEMIX’s personal account of the exploit.
WEMIX mentioned it has recognized the wallets concerned and requested exchanges and stablecoin issuers to freeze the associated addresses, including that some platforms had already performed so.
What the Bridge Suspension Means for WEMIX Holders
With the PLAY Bridge, the Chainlink CCIP integration, and the WEMIX$ module all paused, holders can not transfer WEMIX property throughout chains or commerce on the PNIX decentralized change till the corporate lifts the suspension.
The incident provides WEMIX to a rising checklist of 2026 exploits lined in our crypto information, and it lands barely a yr after the platform’s personal Play Bridge hack value it roughly $6.2 million in February 2025.
Whether or not WEMIX Can Absolutely Hint the Stolen $724,000
WEMIX mentioned the trigger and full scope of the breach stay beneath investigation and warned that its preliminary figures might nonetheless change as it really works with safety corporations. The corporate has left regulation enforcement motion on the desk if the pockets freezes and change cooperation doesn’t get better the funds.
What This Means for You
If you happen to maintain WEMIX or use WEMIX$ for in-game funds, deal with this as a sign to pause cross-chain transfers till the corporate confirms its bridges are safe once more. Contract possession exploits like this one let an attacker create tokens out of skinny air relatively than steal current ones, so provide and worth can transfer even earlier than any funds depart the platform. Look ahead to WEMIX’s personal updates relatively than third-party rumors, because the firm has already mentioned its preliminary figures could also be revised.
This text is for informational functions solely and doesn’t represent monetary recommendation. Do your personal analysis earlier than making any funding selections.