WEMIX has suspended bridges related to WEMIX3.0 after discovering {that a} contract associated to WEMIX$was compromised, resulting in the unauthorized issuance of roughly 5,225,525 WEMIX$. In keeping with an announcement on July 27, 2026, the irregular transaction occurred at 18:17 UTC+9, inflicting property to be transformed into 30,736 WEMIX and 724,198.27 USDC.e earlier than being moved out of the ecosystem through cross-chain routes.
The Incident
WEMIX said that the irregular transaction was recorded at 18:17 on July 26, 2026 Korean time (UTC+9), after possession rights of a contract associated to WEMIX$ have been compromised. These rights have been subsequently used to concern WEMIX$ unauthorizedly and switch USDC.e out of the ecosystem.
In keeping with preliminary information from WEMIX, the attacker abnormally minted roughly 5.23 million WEMIX$. This quantity of tokens was later transformed into 30,736 WEMIX and 724,198.27 USDC.e, earlier than the USDC.e portion was additional moved by means of cross-chain routes. WEMIX famous that these figures have been recorded in the course of the preliminary part of the investigation and should change because the evaluate course of completes.
Replace on WEMIX$ Safety Concern and Response Measures
The irregular transactions involving WEMIX$ and have taken rapid emergency measures to guard consumer property and stop additional impression. Investigation and asset monitoring are actively underway.
Full Announcement:… pic.twitter.com/PHcAdB0uAw
— WEMIX (@WemixNetwork) July 26, 2026
WEMIX has not described this incident as a direct assault on the bridges. In keeping with data launched by the mission, the core concern lay within the contract associated to WEMIX$, whereas halting the bridges was an emergency measure to limit the move of funds from persevering with to maneuver to different networks or additional impacting liquidity inside the ecosystem.
Cross-Chain Fund Motion
The USDC.e portion was subsequently transferred to Ethereum and BNB Sensible Chain through cross-chain routes utilized by the ecosystem, together with Chainlink CCIP and PLAY Bridge, in keeping with WEMIX’s description.
From networks outdoors WEMIX3.0, the property continued to be swapped into ETH and USDT, then dispersed throughout a number of addresses. WEMIX said {that a} portion of the property had been deposited into centralized exchanges, making freezing efforts depending on the diploma of coordination between the mission, exchanges, and stablecoin issuers.
Up to now, WEMIX said that they’ve recognized addresses associated to the attacker and are persevering with to trace on-chain fund flows. The mission has not but disclosed a full record of wallets, the quantity of property frozen, or the portion of property nonetheless outdoors management.
WEMIX’s Response
WEMIX suspended all bridges related to WEMIX3.0, together with Chainlink CCIP and PLAY Bridge, as an preliminary response upon detecting the incident. This transfer aimed to limit the asset move from persevering with to depart the ecosystem whereas the group investigates the incident.
Liquidity swimming pools associated to WEMIX$ have been additionally positioned in a suspended state. WEMIX said that buying and selling in affected swimming pools was halted, and liquidity offered by the WEMIX Basis was withdrawn to scale back the danger of additional loss.
WEMIX additionally briefly suspended a number of providers inside the ecosystem in the course of the safety evaluate. The WEMIX$ Module and PNIX DEX have been suspended, whereas sure in-game blockchain features, NFT buying and selling, and bidding actions on {the marketplace} have been additionally restricted.
Outdoors the ecosystem, WEMIX stated it has contacted exchanges and stablecoin issuers to request freezing associated property. The mission said that some exchanges have executed freezes, however didn’t specify what number of property these measures have helped freeze.
Broader Implications
The incident occurred whereas WEMIX stays a blockchain ecosystem linked to gaming, NFTs, and on-chain monetary providers. In keeping with CoinGecko, WEMIX traded round $0.2115-$0.2116 on July 27, with a 24-hour vary from $0.1829 to $0.2387. The token’s market capitalization stood at round $105.4 million, FDV round $118.2 million, and 24-hour buying and selling quantity reached roughly $2.55 million.
WEMIX value chart (4h). Supply: TradingView
A notable level is that this incident pertains to management rights of the WEMIX contract. When proprietor/admin rights are compromised, the attacker can concern tokens unauthorizedly and make the most of ecosystem liquidity to transform property, inflicting potential injury to unfold quicker than a typical transactional exploit.
WEMIX’s suspension of bridges, liquidity swimming pools, sure WEMIX PLAY features, and actions on the NFT market might have an effect on asset withdrawals, swaps, NFT buying and selling, or interactions with in-game blockchain content material. The reopening of those providers will depend upon the safety evaluate course of for associated contracts, bridges, and swimming pools.
What Stays Unclear
WEMIX has but to publish a full technical root reason for the incident. The present announcement solely confirms that possession rights of the contract associated to WEMIX$ have been compromised, however doesn’t state how the attacker obtained these rights or whether or not the incident entails personal keys, contract configuration, or inside operational processes.
The opportunity of asset restoration additionally stays unclear. WEMIX stated some exchanges have frozen associated addresses, however has not disclosed the quantity of property frozen, trade names, or pockets lists. The timing for reopening bridges, liquidity swimming pools, and providers reminiscent of PNIX DEX, WEMIX$ Module, or the NFT market has additionally not been decided.
