Wemade旗下WEMIX$稳定币合约权限被攻破并异常铸造522万枚代币

이전 기사보기
다음 기사보기
Hackers Illegally Mint 5.22 Million WEMIX$ Tokens in Latest Wemix Security Breach
Character Size Settings
가
The body content of the article will be changed to this letter size.
스크롤 이동 상태바
IT·Gaming
About 724,000 USDC.e Withdrawn as Contract Owner Privileges Were Compromised
KimSeonghun
UPDATE 2026.07.28 08:46
Published 2026.07.27 19:58
Reply 0
이 기사를 공유합니다
Wemade Chairman Park Kwan-ho. (Photo: Wemade)
Another hacking incident has struck Wemix, the blockchain ecosystem and digital asset platform operated by Wemade Co., Ltd. Attackers illicitly minted 5.22 million WEMIX$, the company's U.S. dollar-pegged stablecoin, after compromising the owner privileges of the smart contract responsible for token issuance.
In a notice published on July 27, the Wemix team said it confirmed that the owner authority of the WEMIX$ smart contract had been compromised at 6:17 p.m. on July 26, resulting in the unauthorized issuance of WEMIX$ tokens and the external transfer of USDC.e.
The attacker exploited the contract privileges to mint 5,225,525 WEMIX$ tokens before converting them into 30,736 WEMIX tokens and 724,198.27 USDC.e. USDC.e is a bridged version of USD Coin (USDC) that allows the Ethereum-based stablecoin to be used on other blockchain networks.
The converted USDC.e was subsequently bridged to the Ethereum and BNB Smart Chain (BSC) networks, where it was exchanged into assets including Ether (ETH) and Tether (USDT) before being dispersed across multiple wallets. Some of the digital assets were traced to centralized cryptocurrency exchanges. The value of assets confirmed to have been transferred outside the ecosystem currently stands at approximately $720,000.
The Wemix team said it is tracking the attacker's wallets and the movement of the stolen assets. It has also requested global cryptocurrency exchanges and stablecoin issuers to freeze the affected assets. Some exchanges have already frozen the identified wallet addresses.
To prevent further losses, the Wemix team has suspended all internal and external bridges on the Wemix 3.0 network. It has also temporarily halted Chainlink's Cross-Chain Interoperability Protocol (CCIP), Play Bridge, and liquidity pools related to WEMIX$, while withdrawing foundation-provided liquidity. Related services and backend systems, including the WEMIX$ module and the PNIX DEX decentralized exchange within the WEMIX PLAY ecosystem, have also been suspended.
In addition, blockchain-linked content in certain games and trading on the platform's non-fungible token (NFT) marketplace have been blocked. The company said it is conducting a comprehensive review of related smart contracts and investigating the exact attack vector.
The incident marks Wemix's second major security breach in about 17 months, following the Play Bridge Vault hack in February last year. Approximately 8.65 million WEMIX coins were stolen in that attack, and the company's delayed disclosure subsequently drew criticism over the timing of its public announcement.
Unlike the previous incident, which involved a bridge vulnerability, the latest attack stemmed from the compromise of the contract owner privileges governing token issuance. The breach is viewed as more serious because it enabled the attacker to mint WEMIX$ tokens without restriction.
"We are continuing our investigation," a Wemade spokesperson said. "Any additional findings will be disclosed through official announcements."
The latest incident is also expected to complicate WEMIX's prospects for relisting on South Korean cryptocurrency exchanges. The token was initially delisted over inaccurate circulating supply disclosures before being relisted. However, it was removed again from domestic exchanges on June 2 of the same year after criticism over the delayed disclosure of the Play Bridge Vault hack. Under the guidelines of the Digital Asset eXchange Alliance (DAXA), a token may apply for relisting one year after delisting. The new security breach occurred just as WEMIX was approaching eligibility to reapply.
The incident also adds uncertainty to Wemix's future as Wemade undergoes a change in ownership. Park Kwan-ho, chairman of Wemade, is in the process of selling his entire stake in the company to Neoplus for approximately KRW 920 billion. Once the transaction is completed, Neoplus will become Wemade's largest shareholder.
kimcastle@thelec.kr
View other news
Copyright © The Elec Inc. No unauthorized transfer and redistribution
Comments
Name
Password
Enter comments
0
/ 400
Submit
Sort the comments.
Newest
Recommended
Top Comments
Best comment
It is automatically exposed by adding up the number of replies and recommendations.
close
더보기
Delete comments
Deleted comments cannot be recovered.
Do you still want to delete it?
Delete
Modify the comments
You can modify comments only within 1 minute after writing.
Text
Modify
My comment
Most Read
1
Apple Presses for 20% Cut in iPhone 18 OLED Panel Prices on 'Chipflation'
2
ASML Posts Second-Quarter Earnings Beat on Strong AI Demand, Raises Full-Year Outlook
3
US Commerce Department Says Nvidia's H200 Shipments to China Have Begun
4
Low-Res Flexible OLED Adoption Rises Amid "Chipflation"
5
Chinese AI Models Close in on OpenAI as Google Delays Gemini 3.5 Pro
6
POSCO Future M to Mass Produce Hard Carbon Anode Material for Sodium-Ion Batteries From 2028
7
Court Dismisses Webzen's Injunction to Block 'Dragon Sword: Awakening' Release
8
Samsung Plans 50-Tool Hybrid Bonding Production Line in Pyeongtaek
9
Intel Foundry Deploys High-NA EUV Tools in High-Volume Production
10
Samsung Weighs Outsourcing Back-End Design for Google's 2nm TPU I/O Die
Editor’s Picks
SK Hynix to Open Cheongju P&T7 Cleanroom Three Months Ahead of Schedule
LS Cable & System Wins Power Infrastructure Supply for Hyundai Motor's Battery Campus
LG Electronics to Shut Down Its First China Manufacturing Plant After 34 Years
More Stories
Everspin Supplies Security Solutions to BRI Danareksa Sekuritas
Gravity Secures China License for New MMORPG ‘Ragnarok Origin: Guardians of Eternal Love 2’
Crimson Desert Steam Revenue Surpasses $190 Million in 2026
congatec Launches AMD Ryzen AI-Based COM-HPC Module
Supermicro Unveils H15 Server Portfolio Powered by AMD's 6th Gen EPYC Processors