WEMIX Releases Security Incident Update, Attacker Exploits Smart Contract Vulnerability to Mint 5.22 Million WEMIX$

WEMIX has released an analysis of the security incident and its response. On July 26, the ownership of two smart contracts was transferred to an unauthorized third party, affecting the DIOS and AMA contracts. The attacker deployed malicious contracts to control these two contracts, executing nine rounds of flash loans and swap transactions, resulting in the illegal minting of 5,225,524.9997 WEMIX$. This incident did not breach WEMIX's internal systems, and no private keys were leaked; instead, it exploited vulnerabilities in publicly available on-chain smart contracts. The attacker transferred approximately 723,244 USDC.e and 34,752 WEMIX. The trading of game tokens associated with WEMIX$ is under analysis, and more details will be shared after confirming the scope of impact and compensation amounts. The attacker's address has been identified, and the exchange receiving the funds has been requested to blacklist it. To prevent further minting, the minting rights of WEMIX$ have been revoked, and the team has submitted a formal report to the relevant law enforcement agencies, with an investigation underway.