WEMIX security breach hits stablecoin ownership, with $724,000 in USDC affected

WEMIX said a WEMIX security breach allowed an attacker to compromise ownership of its WEMIX$ stablecoin and convert the access into 30,736 WEMIX and $724,198.27 in USDC. The blockchain network said Sunday, July 26, that the assets were then moved across chains and partly routed into centralized exchanges.

According to WEMIX, the attacker transferred the coins to Ethereum and BSC using bridges, exchanged them into assets including ETH and USDT, and spread them across multiple holdings. The company said the amounts disclosed reflect its findings so far and may change as the investigation continues.

What happened in the WEMIX security breach?

WEMIX said the incident centered on control of WEMIX$, its stablecoin, rather than a general statement that all platform assets were affected. A stablecoin is a digital token designed to track the value of another asset, often the U.S. dollar, while bridges are tools that move crypto assets or representations of them between separate blockchains.

The company said it has identified the attacker’s wallets and is monitoring the movement of funds. WEMIX also said it has asked relevant exchanges and stablecoin issuers to cooperate and freeze assets where possible.

Those steps are a common response after crypto thefts because assets can move quickly between blockchains and trading venues. Centralized exchanges and stablecoin issuers may have the ability to block accounts or freeze tokens when they receive and verify requests, although WEMIX did not say whether any assets had been recovered or frozen.

Digital asset platforms face another security test

The WEMIX disclosure follows a separate incident at cryptocurrency wallet SecondFi, which said less than a week earlier that it was shutting down after an attack that took $2.4 million from its users, according to PYMNTS.

PYMNTS also linked the WEMIX incident to a broader run of digital asset exploits this year. Those included the theft of about $292 million from Kelp DAO, a decentralized finance platform. PYMNTS reported that the Kelp DAO exploit set off a sequence of effects that wiped nearly $9 billion from the largest DeFi lending platform.

Decentralized finance systems are designed to let users lend, borrow, trade or otherwise use financial services through blockchain-based software rather than conventional intermediaries. That design can create faster and more interoperable markets, but security failures can spread across protocols when systems are connected.

Ryan Rugg, global head of digital assets for Citi Treasury and Trade Solutions, told the PYMNTS “From the Block” podcast that the Kelp DAO incident could weigh on confidence. “Does this delay the institutional adoption of DeFi? Maybe,” she said. “It is going to take some of the confidence out of the market.”

Rugg did not describe the exploit as a definitive setback, according to PYMNTS. She said institutional decisions would likely turn on whether companies can show “proper redundancy and security at every layer where the trust resides.”

U.S. lawmakers have proposed a crypto theft task force

The incidents come as U.S. lawmakers consider a federal response to cryptocurrency theft. PYMNTS reported that Reps. Lance Gooden, Republican of Texas, and Josh Gottheimer, Democrat of New Jersey, introduced the Federal Cryptocurrency Theft Enforcement and Coordination Act last month.

The bill would establish a Federal Cryptocurrency Theft Task Force, bringing together the departments of the Treasury, Justice and Homeland Security with federal law enforcement agencies. The proposed task force would be aimed at combating crypto theft and assisting victims, according to PYMNTS.

This story draws on original reporting from PYMNTS.