WEMIX has suspended bridges related to WEMIX3.0 after discovering {that a} contract associated to WEMIX$was compromised, resulting in the unauthorized issuance of roughly 5,225,525 WEMIX$. In line with an announcement on July 27, 2026, the irregular transaction occurred at 18:17 UTC+9, inflicting belongings to be transformed into 30,736 WEMIX and 724,198.27 USDC.e earlier than being moved out of the ecosystem through cross-chain routes.
The Incident
WEMIX said that the irregular transaction was recorded at 18:17 on July 26, 2026 Korean time (UTC+9), after possession rights of a contract associated to WEMIX$ have been compromised. These rights have been subsequently used to problem WEMIX$ unauthorizedly and switch USDC.e out of the ecosystem.
In line with preliminary information from WEMIX, the attacker abnormally minted roughly 5.23 million WEMIX$. This quantity of tokens was later transformed into 30,736 WEMIX and 724,198.27 USDC.e, earlier than the USDC.e portion was additional moved via cross-chain routes. WEMIX famous that these figures have been recorded through the preliminary section of the investigation and will change because the evaluation course of completes.
Replace on WEMIX$ Safety Situation and Response Measures
The irregular transactions involving WEMIX$ and have taken fast emergency measures to guard person belongings and stop additional influence. Investigation and asset monitoring are actively underway.
Full Announcement:… pic.twitter.com/PHcAdB0uAw
— WEMIX (@WemixNetwork) July 26, 2026
WEMIX has not described this incident as a direct assault on the bridges. In line with data launched by the undertaking, the core problem lay within the contract associated to WEMIX$, whereas halting the bridges was an emergency measure to limit the movement of funds from persevering with to maneuver to different networks or additional impacting liquidity inside the ecosystem.
Cross-Chain Fund Motion
The USDC.e portion was subsequently transferred to Ethereum and BNB Good Chain through cross-chain routes utilized by the ecosystem, together with Chainlink CCIP and PLAY Bridge, in response to WEMIX’s description.
From networks outdoors WEMIX3.0, the belongings continued to be swapped into ETH and USDT, then dispersed throughout a number of addresses. WEMIX said {that a} portion of the belongings had been deposited into centralized exchanges, making freezing efforts depending on the diploma of coordination between the undertaking, exchanges, and stablecoin issuers.
Up to now, WEMIX said that they’ve recognized addresses associated to the attacker and are persevering with to trace on-chain fund flows. The undertaking has not but disclosed a full listing of wallets, the quantity of belongings frozen, or the portion of belongings nonetheless outdoors management.
WEMIX’s Response
WEMIX suspended all bridges related to WEMIX3.0, together with Chainlink CCIP and PLAY Bridge, as an preliminary response upon detecting the incident. This transfer aimed to limit the asset movement from persevering with to go away the ecosystem whereas the crew investigates the incident.
Liquidity swimming pools associated to WEMIX$ have been additionally positioned in a suspended state. WEMIX said that buying and selling in affected swimming pools was halted, and liquidity supplied by the WEMIX Basis was withdrawn to scale back the danger of additional loss.
WEMIX additionally briefly suspended a number of providers inside the ecosystem through the safety evaluation. The WEMIX$ Module and PNIX DEX have been suspended, whereas sure in-game blockchain capabilities, NFT buying and selling, and bidding actions on {the marketplace} have been additionally restricted.
Outdoors the ecosystem, WEMIX mentioned it has contacted exchanges and stablecoin issuers to request freezing associated belongings. The undertaking said that some exchanges have executed freezes, however didn’t specify what number of belongings these measures have helped freeze.
Broader Implications
The incident occurred whereas WEMIX stays a blockchain ecosystem linked to gaming, NFTs, and on-chain monetary providers. In line with CoinGecko, WEMIX traded round $0.2115-$0.2116 on July 27, with a 24-hour vary from $0.1829 to $0.2387. The token’s market capitalization stood at round $105.4 million, FDV round $118.2 million, and 24-hour buying and selling quantity reached roughly $2.55 million.
WEMIX worth chart (4h). Supply: TradingView
A notable level is that this incident pertains to management rights of the WEMIX contract. When proprietor/admin rights are compromised, the attacker can problem tokens unauthorizedly and make the most of ecosystem liquidity to transform belongings, inflicting potential harm to unfold quicker than a typical transactional exploit.
WEMIX’s suspension of bridges, liquidity swimming pools, sure WEMIX PLAY capabilities, and actions on the NFT market could have an effect on asset withdrawals, swaps, NFT buying and selling, or interactions with in-game blockchain content material. The reopening of those providers will rely upon the safety evaluation course of for associated contracts, bridges, and swimming pools.
What Stays Unclear
WEMIX has but to publish a full technical root reason behind the incident. The present announcement solely confirms that possession rights of the contract associated to WEMIX$ have been compromised, however doesn’t state how the attacker obtained these rights or whether or not the incident includes personal keys, contract configuration, or inside operational processes.
The opportunity of asset restoration additionally stays unclear. WEMIX mentioned some exchanges have frozen associated addresses, however has not disclosed the quantity of belongings frozen, alternate names, or pockets lists. The timing for reopening bridges, liquidity swimming pools, and providers akin to PNIX DEX, WEMIX$ Module, or the NFT market has additionally not been decided.
