Admin Breach Triggers $5.2M Minting and 66% TVL Crash

Woofun AI reports that the WEMIX ecosystem experienced a critical security failure when administrator privileges on the WEMIX Dollar (WEMIX$) smart contract were compromised, triggering abnormal token issuance across the WEMIX 3.0 mainnet and impacting the Wemixfi platform.

The exploit enabled the unauthorized minting of 5.22 million WEMIX$, valued at approximately $5.2 million, alongside the extraction of 30,000 WEMIX tokens and 720,000 USDC.e. By bypassing standard user-level security measures, the attacker leveraged administrative controls to generate significant value without proper authorization, draining assets directly from the protocol.

Detected at 9:17 a.m. UTC on July 26, the incident prompted immediate containment actions. The WEMIX team blocked both internal and external bridges connected to the WEMIX 3.0 mainnet to halt cross-chain transfers. Simultaneously, trading on liquidity pools was suspended, and the foundation withdrew its supplied liquidity from affected decentralized finance (DeFi) protocols to mitigate further exposure.

Woofun AI data shows that these emergency measures caused the total value locked (TVL) in Wemixfi to drop by 66%. This sharp decline reflects the direct removal of foundation-provided liquidity combined with the broader market reaction to the security breach, illustrating the fragility of protocol stability during active exploits.

The breach underscores persistent risks associated with centralized control points in ostensibly decentralized systems. As administrative key management remains a critical vulnerability, this incident is likely to prompt renewed scrutiny of security architecture and emergency response protocols across the DeFi industry.