WEMIX smart contract breach mints $6.25 million tokens
The WEMIX blockchain ecosystem suffered a significant security breach on July 26, 2026, in which an attacker gained privileged access to a smart contract and illicitly minted approximately $6.25 million worth of tokens. The incident has triggered a major containment and recovery effort by the platform's developer, South Korean gaming company Wemade.
According to the company's announcement, the attacker obtained owner privileges for a contract related to the WEMIX stablecoin, leading to the unauthorized creation of approximately 5.23 million WEMIX tokens. These tokens were then converted into 30,736 WEMIX and 724,198.27 USDC.e. The stolen assets were moved across multiple blockchains, including Ethereum and BNB Chain, via cross-chain bridges and were subsequently swapped into other cryptocurrencies like Ether and Tether. A portion of these funds was deposited into centralized exchanges.
In response, WEMIX said it has identified the attackers' wallets and is actively tracking the fund movements. The company has submitted requests to relevant exchanges and stablecoin issuers to freeze the associated assets. To prevent further unauthorized transfers, WEMIX has temporarily suspended...