WEMIX's Unique Stablecoin 'WEMIX Dollar' Compromised—Unauthorized Issuance and Leakage Due to Smart Contract Takeover

Unauthorized Issuance and Leakage of WEMIX Dollar's Smart Contract Takeover

The WEMIX Foundation, which operates the blockchain game platform "WEMIX" originating from South Korea, announced that the issuance contract of its unique stablecoin "WEMIX Dollar (WEMIX)"—a core component of its ecosystem—was taken over by an unknown entity, leading to unauthorized token issuance.

Abnormal transactions were detected around 6:17 to 6:18 PM (Japan time) on July 26, 2026, when the attacker illegally seized ownership rights within the WEMIX Dollar smart contract. As a result, approximately 5.22 to 5.52 million WEMIX Dollars, equivalent to about 1 billion yen, were issued without authorization as if by a legitimate issuer.

The issued tokens were immediately transferred externally, exchanged for USDC and WEMIX, and then moved to Ethereum and BNB Smart Chain. Furthermore, they were dispersed into swaps with ETH and Tether (USDT), with some flowing into centralized exchanges (CEX).

This incident represents an extremely serious method of taking over issuance rights rather than siphoning from liquidity pools, with the estimated direct damage from actual outflow and cashing out amounting to approximately $724,000 (about 100 million yen).

Emergency Response and Damage Mitigation Measures by the Foundation

In response to the situation, the WEMIX Foundation implemented the following preemptive measures, shutting down the entire ecosystem temporarily:

Temporary Suspension of Bridges and Transactions: All bridges, including Chainlink CCIP and PLAY Bridge, were halted, and self-fund recovery from major liquidity pools and transaction suspensions were executed.
Blocking of Related Services and Content: The backend of PNIX DEX and the WEMIX Dollar module was stopped. Access to parts of the NFT market and game-linked functions was also blocked for protection.
Asset Freezing and Tracking: The attacker’s address was identified, and tracking began. Collaboration with major exchanges and issuers led to the completion of freezing measures for related addresses at some exchanges.

Security System Under Scrutiny and Future Concerns

WEMIX had previously suffered a loss of approximately $6.1 million (about 1 billion yen) from its bridge function in February 2025, which also sparked discussions about key management and disclosure processes.

This case highlights the structural risks in smart contract authority management once again, necessitating thorough cause investigation and comprehensive restructuring of the system to restore trust in the entire ecosystem.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.