🔐 Qubic restarts its chain after $1.4 million was stolen: the funds were recovered, but what about “immutability”?
This wasn’t a smart contract vulnerability—it was weak mnemonic generation.
According to multiple reports, attackers exploited weak-randomness mnemonics generated by some wallets in mobile browsers (some reports say Apple devices were involved), stealing about 2.94 trillion QU—worth roughly $1.4 million—from 1,404 accounts.
🔹 676 Computors (validator nodes) shut down the entire network, freezing about 87.1% of the stolen QU on-chain
🔹 The remaining 12.9% or so went to MEXC, and the receiving account has been frozen
🔹 Validators voted to approve a recovery plan, and the chain has restarted. Affected users can apply to recover their funds by May 1, 2027
The community is split: one side says the network worked as intended and saved users’ money; the other says that if a chain can be stopped and rolled back at will, then its finality depends on people, not code.
My take: this is obviously a happy ending for the victims. But as a token holder, be clear-eyed: the power that can save you can also freeze your assets. This isn’t about right or wrong—it’s about the rules you’re willing to accept when choosing a chain.
A more practical lesson: the security of your mnemonic is only as strong as the tool that generated it. Don’t create wallets on websites, with browser extensions, or using untrusted tools. Use a reputable wallet app or hardware wallet. If your old wallet was created on a website, consider creating a new wallet and transferring your assets.
Would you rather use a chain that can be rolled back when something goes wrong, or one that no one can change?
#Qubic #钱包安全 #助记词 #BlockchainSecurity
This wasn’t a smart contract vulnerability—it was weak mnemonic generation.
According to multiple reports, attackers exploited weak-randomness mnemonics generated by some wallets in mobile browsers (some reports say Apple devices were involved), stealing about 2.94 trillion QU—worth roughly $1.4 million—from 1,404 accounts.
🔹 676 Computors (validator nodes) shut down the entire network, freezing about 87.1% of the stolen QU on-chain
🔹 The remaining 12.9% or so went to MEXC, and the receiving account has been frozen
🔹 Validators voted to approve a recovery plan, and the chain has restarted. Affected users can apply to recover their funds by May 1, 2027
The community is split: one side says the network worked as intended and saved users’ money; the other says that if a chain can be stopped and rolled back at will, then its finality depends on people, not code.
My take: this is obviously a happy ending for the victims. But as a token holder, be clear-eyed: the power that can save you can also freeze your assets. This isn’t about right or wrong—it’s about the rules you’re willing to accept when choosing a chain.
A more practical lesson: the security of your mnemonic is only as strong as the tool that generated it. Don’t create wallets on websites, with browser extensions, or using untrusted tools. Use a reputable wallet app or hardware wallet. If your old wallet was created on a website, consider creating a new wallet and transferring your assets.
Would you rather use a chain that can be rolled back when something goes wrong, or one that no one can change?
#Qubic #钱包安全 #助记词 #BlockchainSecurity