Compromised owner contract let hackers mint 5.23M WEMIX$ — network slams emergency brakes
Quick recap: a contract with owner-level access on the WEMIX3.0 network was hijacked, letting attackers create roughly 5.23 million WEMIX$ out of thin air. The team hit the panic button and froze big chunks of the network to stop the bleeding.
What happened?
The meltdown kicked off on July 26 (about 09:17 UTC / 18:17 local), when a WEMIX$-related contract’s ownership was apparently compromised. That level of control allowed tokens to be minted outside the normal path described in the protocol docs — a glaring bypass of the intended minting rules.
According to the project’s update, 5,225,525 unauthorized WEMIX$ were created and then converted into other assets: about 30,736 of the native WEMIX token and roughly 724,198.27 USDC.e (the bridged stablecoin used on WEMIX3.0). The attacker moved the bridged USDC.e onto other chains (Ethereum and BNB Smart Chain), swapped into assets like ETH and USDT, and split the loot across many addresses. Some of those funds ended up at centralized exchanges.
Worth noting: the WEMIX whitepaper states WEMIX$ should be 100% backed by USDC sitting in a Treasury and that minting is supposed to happen only through an authorized stability protocol (DIOS). The incident shows owner-level control bypassed that setup, but the company hasn’t revealed exactly how the ownership was taken or whether the attacker’s USDC.e came directly from the Treasury.
What’s been shut down and what now?
To limit fallout, the team suspended a wide array of services: all bridges to and from WEMIX3.0, several liquidity pools and trading pairs involving WEMIX$, the WEMIX$ Module that handles conversions, the platform DEX, NFT marketplace trading and bidding, and some blockchain-linked game features. Basically, if it touched the risky bits, it got paused.
The company says some exchanges cooperated and froze attacker-linked addresses after being contacted, but it hasn’t given a final tally of frozen funds or confirmed total losses. There’s no official reopening schedule yet — investigators are still piecing together the how, the how-much, and the who.
Bottom line: the situation is messy and partly unresolved. If you’ve got funds tied up on WEMIX3.0, stay glued to official project channels and avoid making moves until the team clears things up. And maybe, like, don’t let contract keys sit in a blinking neon “press me” button.
