Key highlights:
- The Wemix smart contract breach resulted in the illegal creation of 5.2 million WEMIX tokens.
- The attackers targeted a vulnerability in the smart contract.
- The team has temporarily paused bridges and services as the investigation goes on.
Wemix, a leading blockchain game platform, has confirmed a smart contract exploit today. Reportedly, the attackers minted 5.2 million unauthorized WEMIX tokens in the Wemix smart contract breach. These tokens were later converted into other assets and moved across multiple blockchains.
This security breach is not the only one this year. A number of blockchain security breaches have been reported in 2026 so far. Attackers have increasingly targeted smart contract vulnerabilities and cross-chain infrastructure. This highlights the growing risks facing decentralized ecosystems.
WEMIX smart contract breach unveiled
Earlier today, Wemix revealed the security breach via an official blog post. According to the platform, the hack occurred at 18:17 (UTC+9) on July 26. As the attackers gained control of a contract linked to the WEMIX tokens, they minted 5,225,525 WEMIX tokens without authorization. This means that the attackers created the tokens that were not supposed to exist.
The platform further stated that the attackers converted the WEMIX tokens into 30,736 WEMIX and $724,198.27 worth of USDC.e. This USDC.e was then bridged to Ethereum and BNB Smart Chain. The tokens were later swapped into ETH and USDT. As noted by the firm, a portion of the stolen funds was moved to centralized crypto exchanges.
Despite revealing these details, the team failed to identify the exact cause of the Wemix smart contract breach. However, the internal security team and external experts continue to investigate the matter.
Wemix suspends bridges and services
In response to the Wemix smart contract breach, the platform has immediately activated emergency security measures. This is to prevent further losses to the platform. As part of the efforts, the team suspended all bridges connected to the WEMIX3.0 network temporarily. These bridges include Chainlink CCIP and the PLAY Bridge. Until the issue is resolved, all cross-chain transfers will be disabled.
In addition, trading linked to several affected liquidity pools is also paused. As a precaution, the Wemix Foundation withdrew its liquidity from these pools, which include WEMIX-USDC.e, WEMIX-WEMIX$, CROW-WEMIX$, TIPO-WEMIX$, and PLAY-WEMIX.
Besides these safety measures, the team has also disabled several services, including WEMIX$ Module, PNIX DEX, parts of the WEMIX PLAY platform, blockchain-enabled game features, and NFT marketplace trading and bidding. As the probe into the Wemix smart contract breach continues, the team wants to ensure user protection, stated the platform.
Recovery efforts began
What is reassuring for the affected community members is that the company has already identified the attacker’s wallet address. The team has been actively tracking the movement of the stolen funds across multiple chains. The company has also contacted several crypto exchanges and stablecoin issuers to request that they freeze the related assets.
Additionally, the company has taken the initiative to recover the stolen funds in the Wemix smart contract breach. The team has also pledged to protect its ecosystem and restore affected services. The official statement read,
“The attacker’s wallets and fund movements have been identified and are being actively tracked. Requests for asset freezes and cooperation have been submitted to the relevant exchanges and stablecoin issuers.”
Blockchain hacks continue to rise in 2026
Significantly, the Wemix smart contract breach comes amid rising high-profile blockchain hacks in 2026. Although the crypto industry has strengthened security standards over the past few years, hackers continue to target smart contracts, cross-chain bridges, and decentralized finance (DeFi) protocols.
One of the major incidents was the Kelp DAO exploit, which occurred on April 18, 2026. Here, the attackers manipulated the smart contract and minted millions of dollars worth of unauthorized tokens.
A recent incident, as highlighted in a CoinCodex report, is the Humanity Protocol hack in June. The security incident involved a loss of about $32 million. Altogether, in the first half of 2026, the crypto industry has lost more than $1 billion in assets to blockchain hacks.
Source:: Wemix Smart Contract Breach Sees 5.2M Tokens Minted Illegally