🎲 One bad line of code drained 1,404 wallets in 104 minutes.
Qubic's browser wallet used JavaScript's Math.random() — a pseudo-random generator built for animations, NOT cryptography — to create wallet seeds. Predictable = reproducible: ~2.94 trillion QU (~$1.4M) emptied in a single October morning.
Validators froze 87% of the funds on-chain and halted the network; MEXC froze the rest. But the lesson stands: your security is only as strong as the weakest line in the wallet code.
This is why audited, open-source wallets matter.
Qubic's browser wallet used JavaScript's Math.random() — a pseudo-random generator built for animations, NOT cryptography — to create wallet seeds. Predictable = reproducible: ~2.94 trillion QU (~$1.4M) emptied in a single October morning.
Validators froze 87% of the funds on-chain and halted the network; MEXC froze the rest. But the lesson stands: your security is only as strong as the weakest line in the wallet code.
This is why audited, open-source wallets matter.