South Korea’s Wemade-backed WEMIX said an attacker seized owner privileges on a smart contract tied to its WEMIX$ stablecoin and used that access to mint roughly 5.23 million WEMIX$ tokens without authorization.
The attacker swapped the illicit mint for 30,736 WEMIX and 724,198 USDC.e, based on a preliminary incident update WEMIX posted Sunday. The breach forced WEMIX to suspend every bridge and liquidity pool tied to its WEMIX3.0 network while the company works with exchanges to trace where the funds went.
The Contract Takeover Behind the Illicit WEMIX$ Mint
The abnormal transactions began at 9:17 UTC on Sunday, when the attacker gained control of the contract governing WEMIX$ issuance and minted tokens that had no business existing. That sets this incident apart from WEMIX’s February 2025 breach, which came from stolen authentication keys rather than a compromised smart contract, according to Cointelegraph.
The attacker then bridged the converted USDC.e to Ethereum and BNB Smart Chain, exchanged it for assets including Ether and Tether’s USDT, and spread the funds across multiple wallets, with some deposits landing on centralized exchanges. KuCoin’s news desk separately put the unauthorized mint at 5,225,525 WEMIX$, matching WEMIX’s own account of the exploit.
WEMIX said it has identified the wallets involved and asked exchanges and stablecoin issuers to freeze the related addresses, adding that some platforms had already done so.
What the Bridge Suspension Means for WEMIX Holders
With the PLAY Bridge, the Chainlink CCIP integration, and the WEMIX$ module all paused, holders cannot move WEMIX assets across chains or trade on the PNIX decentralized exchange until the company lifts the suspension.
The incident adds WEMIX to a growing list of 2026 exploits covered in our crypto news, and it lands barely a year after the platform’s own Play Bridge hack cost it roughly $6.2 million in February 2025.
Whether WEMIX Can Fully Trace the Stolen $724,000
WEMIX said the cause and full scope of the breach remain under investigation and warned that its preliminary figures could still change as it works with security firms. The company has left law enforcement action on the table if the wallet freezes and exchange cooperation doesn’t recover the funds.
What This Means for You
If you hold WEMIX or use WEMIX$ for in-game payments, treat this as a signal to pause cross-chain transfers until the company confirms its bridges are secure again. Contract ownership exploits like this one let an attacker create tokens out of thin air rather than steal existing ones, so supply and price can move even before any funds leave the platform. Watch for WEMIX’s own updates rather than third-party rumors, since the company has already said its initial figures may be revised.
This article is for informational purposes only and does not constitute financial advice. Do your own research before making any investment decisions.
