WEMIX says attacker moved about $724,000 after contract breach

Summary

WEMIX reported a security incident in which an attacker compromised ownership of a contract tied to its WEMIX$ stablecoin and minted tokens without authorization. At 9:17 UTC on Sunday, the attacker issued about 5.23 million WEMIX$, converting it into 30,736 WEMIX and 724,198.27 USDC.e. The USDC.e was bridged to Ethereum and BNB Smart Chain, then swapped into assets including Ether and USDT and spread across multiple addresses. WEMIX said some funds were sent to centralized exchanges and requested asset freezes and exchange support; some related addresses were reportedly frozen. It also temporarily suspended all bridges connected to WEMIX3.0, including Chainlink CCIP and PLAY Bridge, halted trading in affected liquidity pools, withdrew foundation liquidity, and paused WEMIX$ Module and PNIX DEX services. The full cause and total impact are still under investigation.