Points of Focus
- WEMIX fell 12% after a contract exploit minted 5.23 million unauthorized WEMIX$ tokens.
- The attack triggered a 66% TVL drop, exposing shaken confidence across the DeFi ecosystem.
- The breach marks WEMIX’s second major hack in under 18 months despite security upgrades.
The WEMIX ecosystem suffered another major security incident after an attacker compromised a contract tied to its WEMIX$ stablecoin, minting millions of unauthorized tokens before moving the proceeds across multiple blockchains and centralized exchanges.
The exploit sent shockwaves through the network, with the WEMIX token falling roughly 12% to around $0.22 while WEMIX$ briefly lost its dollar peg.
According to WEMIX’s preliminary incident report, the attacker gained control of a WEMIX$ contract and issued approximately 5.23 million unauthorized WEMIX$ tokens.
The newly minted tokens were swapped into WEMIX and about 724,198 USDC.e, before being bridged to Ethereum and BNB Smart Chain and exchanged for assets including Ether (ETH) and Tether’s USDT. The funds were then dispersed across multiple wallets, with some eventually reaching centralized exchanges.
WEMIX suspends bridges and launches emergency response
The blockchain gaming platform quickly activated emergency measures to contain the breach. WEMIX suspended all bridges connected to its WEMIX3.0 network, including Chainlink CCIP and the PLAY Bridge, halted trading in affected liquidity pools, withdrew foundation-provided liquidity, and paused several ecosystem services while investigators assessed the damage.
The team said it had identified wallets linked to the attacker and requested assistance from exchanges and stablecoin issuers to freeze the stolen assets.
According to the company, some exchanges had already frozen addresses associated with the exploit, though the full financial impact remains under investigation.
TVL collapse highlights DeFi confidence shock
The attack extended beyond token prices into decentralized finance activity. Security researchers reported that WemixFi’s total value locked (TVL) fell by roughly 66% as users rapidly withdrew assets following the unauthorized issuance of WEMIX$.
The sharp outflows illustrate how security incidents can quickly erode confidence across an ecosystem, even when blockchain operations continue functioning.
The temporary depegging of WEMIX$ also added pressure to DeFi protocols relying on the stablecoin, forcing the foundation to suspend related services while investigating the exploit.
Second major hack in under 18 months
The latest breach marks the second significant security incident to hit the WEMIX ecosystem in less than 18 months. In February 2025, attackers stole approximately 8.65 million WEMIX tokens, worth around $6.2 million, from the platform’s Play Bridge infrastructure.
The incident led to a delayed public disclosure, criticism over transparency, a token sell-off, and subsequent security upgrades, including Chainlink CCIP integration to strengthen cross-chain infrastructure.
The new exploit suggests that despite those improvements, cross-chain infrastructure remains an attractive target for sophisticated attackers. It also highlights how rapidly hackers can move illicit funds across multiple networks, making recovery increasingly difficult even when exchanges cooperate with asset freezes.
As WEMIX continues its forensic investigation, investors will be watching whether confidence in the ecosystem can recover after two major security breaches in under two years.
preferred on
