The smart contract system of GameFi blockchain WEMIX has been compromised. On Sunday, July 27, 2026, at 09:17 UTC, an attacker took over ownership of the contract governing WEMIX$ - the network’s primary stablecoin. Leveraging this exploit, the perpetrator immediately minted 5.23 million new unauthorized WEMIX$ tokens.
The fake tokens were quickly offloaded. The attacker immediately swapped the newly minted WEMIX$ into 30,736 WEMIX and 724,198.27 USDC.e. The stolen funds in USDC.e were subsequently bridged to the Ethereum and BNB Smart Chain networks. Upon arrival, the perpetrator converted them into ETH and USDT before dispersing them across dozens of different wallet addresses to obscure tracking.
The incident deals a heavy blow to WEMIX, a South Korea-based layer-1 blockchain project focused on building a Web3 gaming ecosystem.
Network Isolation to Contain Losses
Upon detecting the liquidity drain, the WEMIX development team implemented emergency measures, suspending all bridges operating on the WEMIX3.0 network. The halt cut off all incoming and outgoing fund transfers, including those routed through Chainlink CCIP and the native PLAY Bridge.
Isolation efforts did not stop there. Trading across affected liquidity pools was immediately halted. WEMIX also withdrew foundation-owned liquidity from the open market and paused all services related to the WEMIX$ Module and the PNIX decentralized exchange. The move locked down the network to prevent the attacker from swapping the remaining counterfeit tokens for legitimate user assets.
Initial tracing revealed that part of the distributed funds has reached several centralized exchanges (CEXs). The WEMIX security team has identified the wallet addresses used by the attacker and requested the relevant exchanges and stablecoin issuers to freeze the assets immediately. According to recent reports, several exchanges have already responded and locked the attacker’s wallet addresses before the funds could be cashed out.
What Remains Unknown
Despite the mitigation steps taken, the root cause remains unclear. The WEMIX team stated that the exact method by which the hacker seized ownership of the WEMIX$ smart contract is still under investigation. The preliminary loss figure of $724,000 in USDC is also not final and may change as the internal investigation progresses.
For players and liquidity providers in the WEMIX ecosystem, the network suspension leaves them waiting in uncertainty. The incident highlights that no matter how engaging the gameplay is, foundational infrastructure security remains the most critical factor. When the vault is breached, in-game digital assets quickly lose their value.
Reported by Cointelegraph.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
