1,404 wallets drained — not by a smart-contract bug, but by wallet seeds that weren't random enough.
On October 18, Qubic halted its chain at tick 85,371,949 after an attacker exploited weak seed generation: ~2.94 trillion $QU stolen (~$1.4M) from 1,404 wallets. The vulnerable wallets were created on iPhones, iPads and Macs (Safari) before October 18 — or the Qubic iOS app before July 2025.
The response was sharp: 87.1% of the stolen funds got frozen on-chain, and one exchange locked down the other 12.9%. The fix (wallet v4.26.4) swaps a weak pseudorandom generator for a cryptographically secure one. The network's Computors still have to vote on what happens to the frozen funds.
The uncomfortable part: no protocol flaw, no bridge — the most boring layer of the stack did the damage.
When did you last check how your own wallet makes its seed phrase?
NFA. DYOR.
$QU #Crypto #Security #DeFi
On October 18, Qubic halted its chain at tick 85,371,949 after an attacker exploited weak seed generation: ~2.94 trillion $QU stolen (~$1.4M) from 1,404 wallets. The vulnerable wallets were created on iPhones, iPads and Macs (Safari) before October 18 — or the Qubic iOS app before July 2025.
The response was sharp: 87.1% of the stolen funds got frozen on-chain, and one exchange locked down the other 12.9%. The fix (wallet v4.26.4) swaps a weak pseudorandom generator for a cryptographically secure one. The network's Computors still have to vote on what happens to the frozen funds.
The uncomfortable part: no protocol flaw, no bridge — the most boring layer of the stack did the damage.
When did you last check how your own wallet makes its seed phrase?
NFA. DYOR.
$QU #Crypto #Security #DeFi