On July 26 WEMIX disclosed a contract compromise that led to 5,225,525 unauthorized WEMIX$ minted and converted into 30,736 WEMIX and 724,198.27 USDC.e which moved across bridges to Ethereum and BSC with some funds reaching CEXs, prompting suspension of WEMIX3.0, Chainlink CCIP and the PLAY Bridge; Garden Finance also took its app offline after about $450,000 USDT was drained across Ethereum, Base, Arbitrum and BSC. TRM Labs logged 207 hacks in H1 2026 versus 83 a year earlier while total losses fell to roughly $972 million from $2.3 billion, indicating more frequent but smaller crypto and DeFi security incidents that heighten bridge, CEX and token launch risks to adoption.

Bearish

Predictions Markets

See what traders are focused on

View analytics →

In Brief

WEMIX said 724,198 USDC.e left through bridges after unauthorized WEMIX$ issuance.
Garden Finance took its app offline after Blockaid flagged a $450,000 USDT drain.
TRM Labs logged 207 hacks in H1 2026, double the prior year.

Two crypto platforms disclosed security incidents over the weekend. WEMIX said ownership of a WEMIX$-related contract was compromised, while Garden Finance took its app offline after identifying unusual activity.

Both incidents are small by dollar value. Yet they match the pattern that has shaped crypto security this year, with attack counts climbing to records while individual losses shrink.

What Happened at WEMIX and Garden

WEMIX reported abnormal transactions on the evening of July 26. Approximately 5,225,525 WEMIX$ were issued without authorization.

That supply converted into 30,736 WEMIX and 724,198.27 USDC.e. The assets moved through bridges to Ethereum and BSC, then into assets including Ether (ETH) and Tether (USDT).

Some of those assets reached centralized exchanges. WEMIX said it has asked exchanges and stablecoin issuers to freeze the attacker’s wallets.

“All bridges connected to and from WEMIX3.0 have been suspended temporarily. Chainlink CCIP has been suspended, and the PLAY Bridge has also been temporarily suspended,” the platform said.

The company said the cause remains under investigation, and the numbers may change.

Separately, Blockaid flagged an exploit on Garden Finance. The firm counted about $450,000 in USDT drained across Ethereum, Base, Arbitrum (ARB), and BSC at the time of its alert.

we identified unusual activity on garden today and are looking into it.the app is temporarily offline while we complete a full investigation.we'll share updates as soon as we have more information.
— Garden 🌸 (@gardenfi) July 26, 2026

Record Crypto Hacks Define 2026

TRM Labs recorded 207 hacks in the first half of 2026. That is more than double the 83 logged a year earlier. The firm said the figure was the highest it had recorded in any six-month period.

However, total hack losses moved in the opposite direction. Roughly $972 million was stolen, against about $2.3 billion in H1 2025.

The data points to a split between frequency and severity. More attacks landed, yet the largest sums concentrated on a handful of high-value targets, including KelpDAO and Drift Protocol.

Last week reinforced the pattern. Lookonchain counted three attacks last week totaling $35.55 million, hitting AFX Trade, the Verus Ethereum bridge, and B2 Network.

Subscribe to our YouTube channel to watch leaders and journalists provide expert insights

Read the article at BeInCrypto