WEMIX Details WEMIX$ Incident After Attackers Leveraged Public Smart Contract Flaw

PANews, July 30 — WEMIX published an updated post-incident review of the WEMIX$ security event, outlining the root cause and response measures. The company said that on July 26 the ownership of two smart contracts was transferred to an unauthorized third party. The impacted contracts were DIOS, which is designed to support WEMIX$ price stability, and AMA, which enables 1:1 redemption of WEMIX$ for collateral assets. According to WEMIX, the attacker used a single transaction to deploy a malicious contract, seized control of both DIOS and AMA, then carried out nine rounds of flash-loan and swap operations. The activity led to the unauthorized minting of 5,225,524.9997 WEMIX$. WEMIX said the incident was not caused by a compromise of its internal systems or a leak of administrator private keys. Instead, the attacker exploited vulnerabilities in publicly accessible onchain smart contracts.