WEMIX$ Stablecoin Contract Takeover

What happened

On 26 July 2026 an attacker compromised ownership of a contract behind WEMIX$, the dollar stablecoin of the WEMIX gaming chain, and issued 5,225,525 tokens without authorisation. WEMIX says those were converted into 30,736 WEMIX and 724,198.27 USDC.e, which was bridged to Ethereum and BNB Smart Chain, swapped into ETH and USDT and spread across wallets, with some deposited at centralised exchanges.

The nominal mint was about $5.2m at par, but the tokens were sold into WEMIX's own liquidity pools, so the assets that actually left came to roughly $731,000. WEMIX suspended all bridges to and from WEMIX3.0 along with Chainlink CCIP and the PLAY Bridge, halted trading in five pools, withdrew foundation liquidity, paused the WEMIX$ module and PNIX DEX, and disabled NFT trading and some in-game blockchain features. WEMIX$ lost its peg, falling about 99 per cent to roughly $0.0109. The first public notice came 5 hours 33 minutes after the attack, against three days for the company's February 2025 Play Bridge incident. All figures are WEMIX's preliminary account.