SINGAPORE, July 27, 2026
WEMIX suspended bridges, affected liquidity pools and several ecosystem services after saying a compromised WEMIX$ stablecoin-related contract was used to issue tokens without authorization and move $724,198.27 in USDC.e, a breach disclosed after WEMIX fell 5.4% in 24 hours.
The WEMIX team said the incident occurred at 18:17 on July 26 in South Korea. Its preliminary account does not identify the attacker or the root cause, but says ownership of a WEMIX$-related contract was compromised and that the resulting funds were bridged away from the network.
The disclosure puts a concrete number on an incident that also interrupted user-facing routes. WEMIX said it halted all bridges connected to WEMIX3.0, certain pools, its WEMIX$ Module and PNIX DEX, while also restricting NFT marketplace activity and selected blockchain-integrated game functions.
Market data from CoinGecko showed WEMIX near $0.2107 at the time of writing, down 5.4% over 24 hours and 13.0% over seven days. The token’s market capitalization was about $104.9 million and 24-hour trading volume was about $2.3 million, leaving the reported USDC.e transfer equal to a meaningful share of daily spot turnover.
In its incident update, WEMIX said, “The attacker’s wallets and fund movements have been identified and are being actively tracked.” The team said it had asked exchanges and stablecoin issuers for freezes, and that some exchanges had completed freezes tied to attacker addresses.
WEMIX says 5.23 million WEMIX$ was issued without authorization
WEMIX said about 5,225,525 WEMIX$ was issued abnormally after the contract ownership compromise. The issuer said that amount was subsequently converted into 30,736 WEMIX and $724,198.27 in USDC.e.
The money trail described by the team is as important as the issuance itself. WEMIX said the USDC.e was transferred to Ethereum and BNB Chain through bridges, then swapped and distributed into assets including ETH and USDT, with a portion later deposited at centralized exchanges.
That is a different failure mode from a conventional wallet drain. The project describes a compromised contract authority, which can affect a stablecoin’s supply controls and has forced it to pause the surrounding infrastructure while it reviews related contracts. WEMIX’s technical white paper describes WEMIX$ as a USDC-collateralized stablecoin, but the July 26 notice did not say whether backing reserves were lost or whether user balances outside the affected paths had changed.
The issuer said the investigation remains preliminary and that the figures may change. It did not provide a timetable for reopening services or describe a completed recovery plan.
WEMIX
WEMIXWEMIX suspends bridges and affected liquidity pools
WEMIX said it temporarily suspended every bridge connected to WEMIX3.0, including Chainlink CCIP and PLAY Bridge. It also stopped trading in pools involving WEMIX, USDC.e, WEMIX$, CROW, TIPO and PLAY, and said foundation-provided liquidity had been withdrawn immediately.
Those measures reduce the number of ways a compromised asset can circulate, but they also place users in a holding pattern. The notice says the WEMIX$ Module and PNIX DEX have been paused, while NFT marketplace trading and bidding were disabled as a precaution.
For crypto users, the wording distinguishes the facts disclosed so far from unresolved exposure. WEMIX said it is inspecting related contracts and contracts with similar structures, but has not yet said whether that review found additional vulnerabilities or how long it will take.
Bridge outages after an exploit can have a wider effect than the first transfer because cross-chain tokens and liquidity pools rely on the route being available. Daily Crypto Briefs previously covered the more severe Taiko bridge exploit, where the network was halted after a bridge loss; WEMIX has not reported a chain-level halt in this case.
What WEMIX users should watch next
The immediate checkpoints are any revised estimate of the loss, the status of exchange and issuer freezes, and a clear reopening sequence for bridges and affected services. A frozen attacker address can slow cash-out routes, but it does not by itself settle the question of recoverable assets or contract remediation.
WEMIX is also facing the trust test that follows a supply-control incident. The project has said its response includes tracing the addresses, working with external experts and authorities, and reviewing comparable contracts. It has not said whether users need to take action beyond observing the temporary service restrictions.
The episode lands in a market already sensitive to infrastructure failures. A recent Gnosis Pay delay-module exploit showed how a focused smart-contract failure can lead to limited service availability even when a project moves quickly to contain it. WEMIX’s case adds stablecoin issuance and cross-chain transfers to that operational challenge.
Crypto market sentiment was neutral on July 27, according to the Crypto Fear and Greed Index, even as security news remained a source of token-specific pressure.
Fear & Greed Index
July 27, 2026The next WEMIX update will need to clarify the exploit’s root cause, the final amount of assets exposed and whether paused bridges and trading functions can reopen safely. Until then, the project’s own notice remains the most authoritative account, and its figures should be treated as preliminary rather than final.
Stay up to date
Get the latest crypto insights delivered to your inbox
Primary sources and further reading
| Source | Title |
|---|---|
| | WEMIX: Update on the WEMIX$ Security Issue and Response Measures |
| | WEMIX Brand Assets |
| | WEMIX3.0 White Paper v1.15 |
| | CoinGecko: WEMIX market data |
| | PYMNTS: WEMIX Hit With $724K Stablecoin Security Breach |
Fact-checked by: Daily Crypto Briefs Fact-Check Desk
Related Articles
Frequently Asked Questions
What happened to WEMIX$ on July 26, 2026?
WEMIX said ownership of a WEMIX$-related contract was compromised, allowing unauthorized issuance of about 5.23 million WEMIX$. The issuer said the assets were converted into WEMIX and USDC.e, with the USDC.e later moved through bridges.
How much was taken in the WEMIX$ contract breach?
WEMIX's preliminary update said 5,225,525 WEMIX$ was converted into 30,736 WEMIX and 724,198.27 USDC.e. The project said the figures may change as its investigation continues.
Which WEMIX services were suspended after the breach?
WEMIX said it temporarily suspended bridges connected to WEMIX3.0, several affected liquidity pools, the WEMIX$ Module, PNIX DEX, NFT marketplace trading and some blockchain-integrated game functions.
Are WEMIX bridges active after the contract compromise?
No reopening time was disclosed in WEMIX's July 26 update. The project said connected bridges, including Chainlink CCIP and PLAY Bridge, had been temporarily suspended while response work continued.



