In Brief:
- WEMIX confirmed a security breach involving its WEMIX$ stablecoin, leading to an unauthorized minting of over 5 million tokens.
- The attacker exploited a compromised contract, converting newly minted tokens into USDC.e and ETH before moving them off-chain.
- WEMIX has temporarily suspended trading and bridges to contain the situation and is actively tracking the attacker’s wallets.
Security breach confirmed
WEMIX has acknowledged a security breach affecting its WEMIX$ stablecoin. The incident, which occurred at 18:17 on July 26, 2026, KST, prompted immediate emergency measures to protect user assets. The company has begun investigating and tracking affected assets but noted that findings may evolve as the inquiry continues.
Compromised contract details
The breach appears to stem from a compromised contract, which allowed the unauthorized issuance of approximately 5,225,525 WEMIX$ stablecoins. Once minted, these tokens were converted into 30,736 WEMIX and 724,198.27 USDC.e. Subsequently, the funds were moved off-chain.
The USDC.e was bridged to Ethereum and Binance Smart Chain, where it was swapped for other assets, including ETH and USDT. WEMIX has identified the attacker’s wallets and is actively tracking fund movements, submitting requests for asset freezes at relevant exchanges.
Emergency measures enacted
In response to the incident, WEMIX suspended all bridges associated with WEMIX3.0, including Chainlink CCIP and the PLAY Bridge. Trading in affected liquidity pools was halted, covering several pairs. The WEMIX Foundation also withdrew liquidity to mitigate further losses.
Service protection measures include the temporary suspension of the WEMIX$ Module and PNIX DEX. In-game blockchain content underwent proactive inspection, leading to disabled NFT trading and protective measures for relevant WEMIX PLAY functionalities.
Overview of WEMIX
WEMIX operates as a Layer 1 network and blockchain gaming platform under WEMIX PTE. LTD., part of South Korean game developer Wemade. WEMIX PLAY serves as its gaming hub, utilizing a play-and-earn model that integrates in-game economies with on-chain assets.
The WEMIX token functions as the core asset across the ecosystem, supporting staking, governance, and transactions. WEMIX$ serves as a stable medium for exchange within games. The incident, which caused a wide-ranging shutdown, reflects the interconnected structure of WEMIX’s ecosystem.
Challenges ahead
This breach occurs amid ongoing regulatory scrutiny and market pressure in South Korea. WEMIX has previously faced challenges, including a delisting saga on domestic exchanges, which adds pressure on its ecosystem’s security and user confidence.
WEMIX is prioritizing incident response and the protection of its ecosystem. The company aims to determine the full scale and impact of the breach and will provide updates through official channels as more information becomes available.
