From 4 October 2026, South Korean company Wemade is implementing a new operating policy for MIR4, the online role-playing game that links playtime to cryptocurrency. The most noticeable change affects those who have stopped playing: character and clan names that remain unused for a long period will be released for other players to use. The announcement comes two months after the 26 July hack on the WEMIX network, which froze all the game’s blockchain functions for three weeks, and a few days after compensation was distributed on 21 September.
MIR4 was released worldwide on 26 August 2021, for mobile and PC, and last August marked its fifth anniversary with the introduction of a new character class, the Spirit Summoner. According to Wemade, over 24.4 million accounts have been created. It is available as normal in Greece, as the terms of service exclude only China and South Korea. What sets it apart from most games of its kind is that darksteel, a material players collect within the game, is converted into DRACO, a token traded on the WEMIX platform. Entire characters can also be turned into NFTs and sold.
From 4 October, inactivity will be measured per character rather than per account. A character below level 60 who has not logged into the game for two months or more may lose their name, even if the same account is actively playing with another character. The character and everything they have collected remain intact; only the name changes, and the company says it will provide a way to set a new one. The same applies to inactive clan names, without the clan itself being disbanded.
Deleting characters, on the other hand, becomes more difficult. The threshold rises from two to twelve months of inactivity, and characters with a purchase history are exempted entirely. Before any name change or deletion, an individual notification will be sent 30 days in advance, and anyone who logs in with that particular character after the notification is sent will be excluded from the process.
The new policy also includes a separate clause setting out ‘precautions’ regarding the use of blockchain. In it, the company states that it guarantees neither the value nor the preservation of items it has designated as NFTs or tokens, that their value may be affected by changes to the game itself, and that it is not liable for losses arising from fluctuations in their price. It also reserves the right to request additional personal data if required by new regulations.
The theft took place on Sunday 26 July at 12:17 Greek time. According to the findings of the WEMIX team, someone gained control of two ‘smart contracts’ for WEMIX$, the platform’s dollar-pegged stablecoin, and unauthorisedly withdrew 5,225,525 WEMIX$. A total of 723,244 USDC and 34,752 WEMIX were withdrawn from the network. The company insists that neither its internal systems nor administrator keys were compromised; the perpetrator exploited a loophole in the contracts themselves. This was not the first time. In February 2025, approximately 8.65 million WEMIX had been stolen from the Play Bridge, and on 2 June of the same year, major South Korean exchanges suspended trading in it.
For MIR4 players, the impact was greater than for other games on the platform. As Wemade itself admitted, transactions involving the game’s two main tokens, DRACO and HYDRA, were processed directly via WEMIX$. From 18:35 Greek time on the same day, the webshop, trading, the XDRACO service and NFT creation were suspended. Services were scheduled to resume after the maintenance on 18 August, with USDC.e replacing WEMIX$ as the basis for exchanges and the exchange rate set at the same level as before the theft.
In accordance with the plan dated 26 August, on 21 September, compensation was automatically distributed to those who held WEMIX$ shortly before the theft and to those who lost money from transactions during those hours, in the form of a new token, eqWEMIX$. Those who had executed sell orders on the PNIX DEX received PLAY, whilst those who had staked funds in liquidity pools with WEMIX$ must submit a claim to support. The eqWEMIX$ is exchanged one-to-one with USDC.e without a fee, but not automatically: the holder must send it themselves to a specific address and then submit the sending address and transaction ID (TxHash) to support. Payments are made in weekly batches that close every Monday and are finalised within 10 working days.
This is where the greatest practical risk lies for those expecting compensation. A process that says ‘send your tokens to this address’ is exactly what fraudsters copy into fake messages. WEMIX itself warns that it will never ask for a private key or wallet recovery phrase, that anything sent to the wrong address is lost forever, and that transfers must be made from a personal wallet and not from an exchange address.
The fact that playtime translates into money is also evident in the account bans. Wemade publishes a weekly report: on 18 September, it banned 3,496 accounts for using unauthorised programmes, bringing the total to 15,114,043. The game’s policy includes a specific clause on so-called ‘farms’ – organised groups of accounts that play en masse for profit.
For parents, there is also a gap that isn’t immediately apparent. On Google Play for Greece, MIR4 is listed with a PEGI 12 rating and the warnings ‘Moderate violence’, ‘Users interact’ and ‘In-app purchases (includes random elements)’. However, Wemade’s terms of use stipulate that no one under the age of 16 is permitted to use the service, except where the law permits use with parental consent. In practice, if Google Play’s parental controls are set to allow games rated up to PEGI 12, MIR4 downloads as normal.
In practical terms, what does anyone who plays, or has a child who plays, do?
- If you have an old character below level 60 that hasn’t been logged into for two months, a single login is enough to retain their name. After 4 October, keep an eye out for in-game notifications: you have 30 days to act.
- If your wallet contained WEMIX$ on 26 July, please check whether you have received any eqWEMIX$. If you have not received any, WEMIX asks that you contact their support team.
- Only obtain the exchange address from the official announcement on the MIR4 forum or on wemix.com; never from a message on Discord, Telegram or by email. No legitimate party will ever ask you for your wallet recovery phrase.
- For children under 16, the PEGI 12 filter on Google Play does not block MIR4. The gov.gr Kids Wallet allows you to block or set a time limit on a specific app, without blocking all games in the same category. Read more in our article on Roblox.
Source: MIR4 / Wemade, announcements on the official forum (26 July, 11 August, 4 September, 18 September and 21 September 2026), operating policy in force from 4 October 2026 and terms of use. WEMIX, ‘WEMIX$ Security Incident Findings and Response Update’ (30 July 2026) and announcement regarding the 5th anniversary of MIR4 (6 August 2026). MIR4 page on Google Play Greece (accessed 27/09/2026). The Korea Times, 2 May 2025, on the 2025 theft and delisting from Korean exchanges.
