WEMIX Attacker Moves $724K After Contract Breach

WEMIX halted bridges and services after an attacker compromised a WEMIX$-linked contract and moved about $724,000 in USDC.e.

WEMIX Attacker Moves $724K After Contract Breach

DOGE

$0.07327

1.98%

TRX

$0.3319

0.12%

LINK

$8.78

4.85%

ZEC

$505.68

4.36%

ADA

$0.1657

0.50%

XRP

$1.11

1.21%

ETH

$1,958.07

4.45%

BTC

$65,412.00

1.58%

XMR

$354.61

2.60%

BNB

$575.17

1.00%

XLM

$0.1827

2.43%

SOL

$76.83

3.17%

HYPE

$59.67

2.64%

Written by

Ezra Reguerra

staff writer

Reviewed by

Bryan O'Shea

staff editor

Written by

Ezra Reguerra

staff writer

Reviewed by

Bryan O'Shea

staff editor

WEMIX says attacker moved about $724,000 after contract breach

Latest News

Published

Jul 26, 2026

WEMIX suspended bridges, liquidity-pool trading and several services after an attacker compromised a WEMIX$-linked contract and moved 724,198 USDC.e.

Layer-1 blockchain network WEMIX said an attacker moved about 724,000 in USDC.e tokens after compromising ownership of a contract linked to its WEMIX$ stablecoin and issuing tokens without authorization.

The abnormal transactions occurred on Sunday at 9:17 UTC,

according

to a preliminary incident update from WEMIX. The attacker issued about 5.23 million WEMIX$, which was converted into 30,736 WEMIX and 724,198.27 USDC.e. The USDC.e was then bridged to Ethereum and BNB Smart Chain before being exchanged for assets including Ether and Tether’s USDT and distributed across multiple addresses.

WEMIX said some of the funds were deposited into centralized exchanges. The company identified the attacker’s wallets and requested asset freezes and assistance from exchanges and stablecoin issuers, adding that some exchanges had already frozen addresses linked to the incident.

The company temporarily suspended all bridges connected to its layer-1 network, WEMIX3.0, including Chainlink CCIP and the PLAY Bridge. It also suspended trading in affected liquidity pools, withdrew foundation-provided liquidity, and paused services including the WEMIX$ Module and PNIX decentralized exchange.

WEMIX said the cause and full impact remain under investigation and warned that the preliminary figures could change.

Related:

DeFi TVL drops 39% in 2026 amid market downturn and record hack activity

Subscribe to daily byte-sized crypto news from Cointelegraph

Subscribe

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s

Editorial Policy

and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

Stablecoin

Hacks

South Korea

Asia

Cybersecurity

Blockchain

More on the subject

South Korea’s largest bank to launch payment service on JPMorgan’s Kinexys

12 hours ago

Yohan Yun

News Brief

Dango’s perp DEX taps out nearly 4 months after launch

Jul 25, 2026

Yohan Yun

RWAs become Hyperliquid’s largest trading category

Jul 24, 2026

Zoltan Vardai

South Korea’s largest bank to launch payment service on JPMorgan’s Kinexys

12 hours ago

Yohan Yun

News Brief

Dango’s perp DEX taps out nearly 4 months after launch

Jul 25, 2026

Yohan Yun

RWAs become Hyperliquid’s largest trading category

Jul 24, 2026

Zoltan Vardai