Security Breach Hits WEMIX3.0: Unauthorized Stablecoin Minting Triggers Network Shutdown

On July 26, the WEMIX ecosystem faced a significant security challenge when a compromised contract ownership led to the unauthorized creation of millions of WEMIX$ stablecoins. This breach forced an immediate and total halt of critical network services, including bridges and liquidity pools, as the team scrambled to contain the fallout and protect the integrity of the WEMIX3.0 blockchain.

Breach of Protocol and Unauthorized Minting

The incident centered on a direct violation of the WEMIX$ stablecoin's intended 1:1 collateralization model. According to the project's whitepaper, minting should only occur through the DIOS stability protocol, backed 100% by USDC held in a treasury. However, by gaining owner-level control of a related contract, an attacker managed to bypass these safeguards to mint approximately 5.23 million unauthorized tokens. These tokens were subsequently converted into native WEMIX and bridged USDC.e, then moved across the Ethereum and BNB Smart Chain networks to be swapped for other assets like ETH and USDT.

Immediate Containment and System-Wide Impact

In response to the abnormal transactions, the WEMIX team implemented a sweeping suspension of the network’s infrastructure. This containment effort reached every bridge connected to WEMIX3.0—including the Chainlink CCIP and PLAY Bridge—and halted trading across multiple liquidity pools and the PNIX DEX. The disruption even extended to NFT marketplaces and blockchain-linked features within various games. While the WEMIX team has coordinated with centralized exchanges to freeze some attacker-associated addresses, the final financial loss and the exact method of the initial compromise remain under investigation. This incident occurs during a transitional period for the project, as WEMIX had previously announced plans to phase out WEMIX$ in favor of USDC.e, a process that is now complicated by the ongoing recovery efforts.