{"id":435258,"date":"2026-07-28T00:59:06","date_gmt":"2026-07-27T19:29:06","guid":{"rendered":"https:\/\/dripp.zone\/news\/compromised-owner-contract-just-let-hackers-print-5-2-million-wemix-stablecoins-out-of-thin-air-forcing-a-complete-network-freeze-crypto-news\/"},"modified":"2026-07-28T01:03:32","modified_gmt":"2026-07-27T19:33:32","slug":"compromised-owner-contract-just-let-hackers-print-5-2-million-wemix-stablecoins-out-of-thin-air-forcing-a-complete-network-freeze-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/compromised-owner-contract-just-let-hackers-print-5-2-million-wemix-stablecoins-out-of-thin-air-forcing-a-complete-network-freeze-crypto-news\/","title":{"rendered":"Compromised owner contract just let hackers print 5.2 million WEMIX stablecoins out of thin air, forcing a complete network freeze &#8211; Crypto News"},"content":{"rendered":"<p><\/p>\n<div>\n<p>The WEMIX team said compromised ownership of a contract tied to its WEMIX$ stablecoin enabled approximately 5.23 million tokens to be minted without authorization, prompting it to suspend bridges, liquidity pools, and several services on the WEMIX3.0 network.<\/p>\n<h2>Contract-owner breach tested WEMIX$&#8217;s 1:1 design<\/h2>\n<p>The <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.wemix.com\/assets\/download\/WEMIX3.0_Whitepaper_v1.15.pdf\">WEMIX3.0 whitepaper<\/a> describes WEMIX$ as 100% collateralized by USDC held in a Treasury and says its supply should remain equal to the Treasury&#8217;s USDC volume. It also says minting is accessible only through Authorized Mint Access, which is granted solely to the DIOS stability protocol.<\/p>\n<p>WEMIX&#8217;s <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/wemix.com\/news\/update-on-the-wemix-security-issue-and-response-measures-06359e6f2a8e\">preliminary incident update<\/a> said the abnormal transactions began at 18:17 on July 26 (UTC+9), or 09:17 UTC, after ownership of a WEMIX$-related contract was compromised.<\/p>\n<p>Taken together, the two documents show that owner-level control was used to produce tokens outside the whitepaper&#8217;s intended minting path. WEMIX has not disclosed the exact route by which that control was compromised, and its update does not establish that the USDC.e later moved by the attacker came directly from the Treasury.<\/p>\n<div class=\"cs-article-embed\"> <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/cryptoslate.com\/humanity-protocols-h-crash-exposes-the-private-keys-behind-its-zk-identity-pitch\/\" class=\"cs-article-embed__link\"><\/p>\n<div class=\"cs-article-embed__media\"> <noscript><\/noscript><img class=\"lazyload\" width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/humanity-protocol-hack-1024x576.jpg\" alt=\"Humanity Protocol hack turns one laptop breach into an identity-token crisis\" loading=\"lazy\" decoding=\"async\"\/><\/div>\n<div class=\"cs-article-embed__body\"> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">Humanity Protocol hack turns one laptop breach into an identity-token crisis<\/h3>\n<p>A $36 million H exploit shows how one custody failure can threaten a project built around digital identity trust.<\/p>\n<p> <span class=\"cs-article-embed__meta-item\">Jun 10, 2026<\/span> <span class=\"cs-article-embed__meta-divider\">\u00b7<\/span> <span class=\"cs-article-embed__meta-item\">Liam &#8216;Akiba&#8217; Wright<\/span><\/p>\n<\/div>\n<p> <\/a><\/div>\n<p>WEMIX said the 5,225,525 unauthorized WEMIX$ was converted into 30,736 units of the network&#8217;s native WEMIX token and 724,198.27 USDC.e, the bridged stablecoin used on WEMIX3.0. The company specifically said the converted USDC.e was bridged to Ethereum and BNB Smart Chain, swapped into assets including ETH and USDT, and distributed among multiple addresses. Some of those assets were later deposited at centralized exchanges.<\/p>\n<p>The nominal number of tokens minted does not establish a $5.23 million loss. WEMIX has not issued a final loss estimate or identified the exchanges involved. It said some exchanges froze attacker-associated addresses after receiving cooperation requests, but did not quantify the frozen amounts or state whether individual user balances suffered losses.<\/p>\n<div class=\"cs-article-embed\"> <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/cryptoslate.com\/polkadot-hyperbridge-april-fools-joke-comes-true-as-over-1-billion-fake-dot-tokens-were-minted-on-ethereum\/\" class=\"cs-article-embed__link\"><\/p>\n<div class=\"cs-article-embed__media\"> <noscript><img width=\"1024\" height=\"683\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/04\/fake-tokens-1024x683.jpg\" alt=\"Polkadot Hyperbridge April Fools\u2019 joke comes true as over 1 Billion fake DOT tokens were minted on Ethereum\" loading=\"lazy\" decoding=\"async\"\/><\/noscript><img class=\"lazyload\" width=\"1024\" height=\"683\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/04\/fake-tokens-1024x683.jpg\" alt=\"Polkadot Hyperbridge April Fools\u2019 joke comes true as over 1 Billion fake DOT tokens were minted on Ethereum\" loading=\"lazy\" decoding=\"async\"\/><\/div>\n<div class=\"cs-article-embed__body\"> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">Polkadot Hyperbridge April Fools\u2019 joke comes true as over 1 Billion fake DOT tokens were minted on Ethereum<\/h3>\n<p>A proof replay bug let the attacker mint over $1 billion DOT tokens on Ethereum, yet shallow DOT pools capped the cashout near $240,000.<\/p>\n<p> <span class=\"cs-article-embed__meta-item\">Apr 13, 2026<\/span> <span class=\"cs-article-embed__meta-divider\">\u00b7<\/span> <span class=\"cs-article-embed__meta-item\">Oluwapelumi Adejumo<\/span><\/p>\n<\/div>\n<p> <\/a><\/div>\n<h2>Containment reached bridges, trading, games and NFTs<\/h2>\n<p>WEMIX&#8217;s July 26 response listed every bridge connected to and from WEMIX3.0 as suspended, including its Chainlink CCIP route and PLAY Bridge. The announcement did not attribute the compromise to Chainlink or report a CCIP failure.<\/p>\n<div id=\"cs-inline-newsletter-6a679e0ff1888\" class=\"cs-inline-newsletter\" data-inline-newsletter=\"\">\n<div class=\"cs-inline-newsletter__inner\">\n<div class=\"cs-inline-newsletter__content\"> <span class=\"cs-inline-newsletter__eyebrow\">CryptoSlate Daily Brief<\/span><\/p>\n<h3 class=\"cs-inline-newsletter__title\">Daily signals, zero noise.<\/h3>\n<p class=\"cs-inline-newsletter__copy\">Market-moving headlines and context delivered every morning in one tight read.<\/p>\n<p> <span><i class=\"fa-regular fa-bolt\" aria-hidden=\"true\"\/> 5-minute digest<\/span> <span><i class=\"fa-regular fa-star\" aria-hidden=\"true\"\/> 100k+ readers<\/span><\/p>\n<\/div>\n<div class=\"cs-inline-newsletter__form-shell\">\n<p class=\"cs-inline-newsletter__privacy\">Free. No spam. Unsubscribe any time.<\/p>\n<p> <i class=\"fa-regular fa-circle-xmark\" aria-hidden=\"true\"\/> <span>Whoops, looks like there was a problem. Please try again.<\/span><\/p>\n<p> <i class=\"fa-regular fa-circle-check\" aria-hidden=\"true\"\/> <span>You\u2019re subscribed. Welcome aboard.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"cs-article-embed\"> <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/cryptoslate.com\/crypto-users-told-to-pull-funds-after-bridge-failure-exposes-rollup-exit-risk\/\" class=\"cs-article-embed__link\"><\/p>\n<div class=\"cs-article-embed__media\"> <noscript><img width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/taiko-bridge-1024x576.jpg\" alt=\"Crypto users told to pull funds after Ethereum L2 bridge failure exposes rollup exit risk\" loading=\"lazy\" decoding=\"async\"\/><\/noscript><img class=\"lazyload\" width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/taiko-bridge-1024x576.jpg\" alt=\"Crypto users told to pull funds after Ethereum L2 bridge failure exposes rollup exit risk\" loading=\"lazy\" decoding=\"async\"\/><\/div>\n<div class=\"cs-article-embed__body\"> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">Crypto users told to pull funds after Ethereum L2 bridge failure exposes rollup exit risk<\/h3>\n<p>The incident forced users to confront the part of rollup security that usually stays invisible: whether they can still withdraw when the bridge layer breaks.<\/p>\n<p> <span class=\"cs-article-embed__meta-item\">Jun 23, 2026<\/span> <span class=\"cs-article-embed__meta-divider\">\u00b7<\/span> <span class=\"cs-article-embed__meta-item\">Liam &#8216;Akiba&#8217; Wright<\/span><\/p>\n<\/div>\n<p> <\/a><\/div>\n<p>The update also listed trading in the WEMIX-USDC.e, WEMIX-WEMIX$, CROW-WEMIX$, TIPO-WEMIX$ and PLAY-WEMIX$ pools as halted. The WEMIX$ Module and <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/cryptoslate.com\/dex\/\">PNIX DEX<\/a> were paused, blockchain-linked features in some games were restricted, and NFT marketplace trading and bidding were disabled.<\/p>\n<p>The disruption followed WEMIX&#8217;s <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/wemix.com\/news\/stablecoin-transition-in-the-wemix30-ecosystem-0b3d9f934873\">September 2025 announcement<\/a> that it would phase WEMIX$ out in favor of USDC.e while continuing conversions through the WEMIX$ Module. That module was among the services listed as suspended in the July 26 incident update.<\/p>\n<p>WEMIX had not provided a reopening timetable in that update. The unresolved cause, final impact, frozen amounts and potential user losses leave the scope of the incident dependent on the company&#8217;s next findings.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The WEMIX team said compromised ownership of a contract tied to its WEMIX$ stablecoin enabled approximately 5.23 million tokens to be minted without authorization, prompting it to suspend bridges, liquidity pools, and several services on the WEMIX3.0 network. Contract-owner breach tested WEMIX$&#8217;s 1:1 design The WEMIX3.0 whitepaper describes WEMIX$ as 100% collateralized by USDC held [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":435260,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[230,225,221,227,226,228,229,60,223,224,222],"class_list":["post-435258","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency","tag-brave","tag-coinbase","tag-crypto","tag-decentralised","tag-decentralized","tag-decentralized-exchange","tag-erc-20","tag-featured","tag-meme-coin","tag-robinhood","tag-solana"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/435258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=435258"}],"version-history":[{"count":1,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/435258\/revisions"}],"predecessor-version":[{"id":435263,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/435258\/revisions\/435263"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/435260"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=435258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=435258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=435258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}