qubic

Qubic just became the latest L1 to learn that "decentralized" has an emergency brake.

The chain halted Sunday after an attacker drained roughly $1.4 million in QU from 1,404 accounts by exploiting predictable wallet seeds — a weak random-number generator in Qubic's web wallet on certain Apple devices and browsers. Validators ("Computors") froze block production to stop the funds moving, then approved a recovery plan.

The chain restarted at 8:00 pm on October 19, advancing past tick 85,371,949. A claims platform is now open, submissions accepted until May 1, 2027. The seed flaw was patched in web wallet v4.26.4 — any wallet created before that version should be treated as compromised: move your funds, abandon the old wallet.

The honest read: the halt worked and most stolen funds never reached an exchange. But a chain whose validators can freeze it on demand has a trusted human layer — users buy decentralization theater until the theater has to save them.

If your L1 can hit pause to protect you, is it still permissionless — or just well-governed? NFA, always DYOR.

#Altcoins #CryptoNews #Qubic #HackRecovery

🚨 1,404 CRYPTO WALLETS DRAINED — AND JUST 6 NETWORK OBSERVATIONS COULD EXPOSE A PRIVATE KEY! 👀
Imagine securing your wallet, never sharing your seed… and still losing everything.
That's the nightmare behind the Qubic security incident.
💥 WHAT HAPPENED?
Between October 17 and 18, an attacker drained:
🔴 1,404 wallets
🔴 2.94 TRILLION QU
🔴 Approximately $1.3 MILLION
The Qubic network was halted to contain the damage.
According to the project, 87.1% of the stolen tokens were immobilized on-chain, while the remaining 12.9% reached MEXC, where the receiving account was frozen.
But the most disturbing discovery came later.
🔍 SLOWMIST'S FINDING
On October 20, security researchers revealed that Qubic's wallet used insufficiently secure randomness when generating certain private keys.
In a controlled test, researchers reconstructed a vulnerable private key using just SIX consecutive network observations under specific conditions.
⚠️ This does NOT prove the attacker used that exact method.
The issue was in wallet seed generation, not a confirmed breach of Qubic's core blockchain protocol.
🚨 WHO SHOULD PAY ATTENTION?
Users who created Qubic wallets before October 18 using:
• Any browser on iPhone or iPad
• Safari on Mac
Or the Qubic iOS app before July 2025.
Version 4.26.4 fixes NEW seed generation.
But previously generated weak seeds remain vulnerable.
💭 PANBAS TAKE:
The scariest part isn't the $1.3M theft.
It's that a wallet can look perfectly secure while its private key was predictable from the beginning.
Frozen funds aren't recovered funds.
If your wallet may be affected, follow official migration instructions. Never share your seed or trust unsolicited recovery offers.
👇 Would you trust a wallet again after discovering its keys weren't truly random?
#Qubic #WalletSecurity #CryptoExploit

Qubic says weak wallet seeds, not protocol flaw, caused a 2.94 trillion QU loss.

Qubic confirmed an attacker drained 1,404 wallets and stole about 2.94 trillion QU between October 17 and 18, citing weak wallet seed generation as the cause.

Seed randomness was insufficient on iPhones, iPads (any browser before Oct 18), Macs (Safari before that date) and the Qubic iOS app before July 2025.

Validators halted the chain at tick 85,371,949, freezing 87.1% of the funds; the remaining 12.9% moved to MEXC, which froze the account, and exchanges have paused QUBIC deposits and withdrawals.

September recorded 55 crypto hacks costing about $766.5 million—462% higher than August—with $387 million lost at Bitget and $320 million at Liquid Network.

How should layer‑1 blockchains improve seed generation to protect users without hurting usability?

#Qubic #CryptoSecurity #Blockchain #CryptoHacks

🚨 $QUBIC SECURITY BREACH DRAINS $1.4M AS OVER 1,400 COMPROMISED WALLETS GET SWEPT! 📉

Over 1,400 wallets holding 2.94 trillion $QUBIC were drained for roughly $1.4M, but the chain consensus itself never failed. 🔍 The critical vulnerability stemmed from insufficient randomness during account credential generation on Apple devices before October 18, leaving stored balances exposed.

Around 87% of the diverted liquidity sits frozen on-chain while the rest was halted at a major exchange. 💡 Halting execution or freezing tokens is not the same as returning capital, and software updates will never fix structurally vulnerable legacy setups. 💬 How often do you migrate your holdings to newly secured vaults to protect your capital? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #QUBIC #CryptoSecurity #OnChain #RiskManagement #Crypto

🛡️ ⚡

🚨 $QUBIC SECURITY BREACH REVEALS SEED VULNERABILITY 🦈

The incident underscores a classic smart‑money move: exploit predictable entropy before the network even feels the strain. 🦈 The 1,404 compromised wallets acted as a liquidity sink, draining $1.4 M while the blockchain itself stayed intact.

📌 Our analysis flags the seed‑generation window—iOS Safari and early Qubic app builds—as a high‑risk entropy pool. 📊 On‑chain data shows 87 % of the stolen tokens frozen, a clear sign that the attacker’s exit strategy was throttled by the network’s freeze logic.

The takeaway for any institutional holder: secure the key‑creation layer as fiercely as the custody layer. 🔍 Upgrade to deterministic wallets, audit RNG sources, and treat any pre‑Oct‑18 seed as compromised.

💬 What steps are you taking to audit seed randomness in your custodial pipelines? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #QUBIC #WalletSecurity #SmartMoney #Crypto #RiskManagement

🦈 📊

🚨 1,404 QUBIC WALLETS DRAINED — AND THE BLOCKCHAIN WASN'T THE WEAK POINT

Qubic just suffered a security incident involving roughly $1.4M in stolen tokens
But here's the detail that matters most 👀
The attacker didn't need to break the blockchain
Some wallet seeds were generated with insufficient randomness, making them potentially predictable

$BTC

🔴 What happened?
• 1,404 wallets drained
• 2.94 trillion QU stolen
• Qubic network halted to prevent further transfers
• 87.1% of stolen funds frozen on-chain
• Remaining funds reportedly frozen at ME.XC

⚠️ Here's the bigger warning
Affected seeds include those created before October 18 using:
• Any browser on iPhone or iPad
• Safari on Mac
• Qubic's iOS app before July 2025
Updating wallet software doesn't make an old weak seed secure
And frozen funds aren't the same as recovered funds

$BNB

🔍 My security checklist
If your wallet falls into an affected category, treat the seed as compromised
Follow Qubic's official recovery instructions before moving funds to a newly generated secure wallet
Never enter your seed into a random recovery website
Your blockchain can be secure while your wallet is already compromised
The real security question isn't just where your assets live
It's how the keys protecting them were created

#Qubic #WalletSecurity

📰 MEXC and Bitget Halt Qubic Deposits and Withdrawals on Their Platforms
MEXC linked its suspension to a request from Qubic’s project team. Bitget cited wallet maintenance.
Source : Econotimes
Time : 2026-10-18 15:27:05
Credit : miriam hart
#bitget #crypto_exchanges #qubic #mexc
$BGB
Share your opinion in the comment section below

Qubic Halts Network Following Wallet Exploit and Outlines Recovery Vote

WHAT HAPPENED
▪️ An attacker drained 1.4K wallets with weak seeds, prompting Qubic to freeze its chain.
▪️ Qubic stated 87.1% of the funds remain onchain, while the rest were frozen at MEXC as validators prepare a recovery vote.

WHY IT MATTERS FOR TRADERS
Network halts may dampen participant confidence and temporarily constrain onchain liquidity. Validator-led asset recovery processes can also influence broader perceptions of governance and settlement finality.

MARKET SNAPSHOT
▪️ $BTC: 82,484.00 USD, up 0.8% (24h), 4H RSI 54.8
▪️ Range to watch: 80,684.36 support / 82,940.81 resistance

How do validator recovery votes influence your view of network governance and risk?

Source: Cointelegraph

Not financial advice. Always DYOR.
Like & Follow for Daily Trade Analytics & Insider News. @MistralAK

#TrendingTopic #Qubic #HotTrends

An attacker drained 1,404 Qubic wallets between 07:42 and 09:26 UTC+8 on Oct 18. Qubic puts the total at about 2.94 trillion QU. At CoinGecko's price tonight that is about $1.25M, roughly $900 per wallet on average and about 2% of the circulating supply.

The weak spot was wallet seed generation, not the protocol. Some seeds were made with too little randomness, so the attacker could work them out. Qubic says affected seeds were made on an iPhone or iPad in any browser before Oct 18, in Safari on a Mac before Oct 18, or in the Qubic iOS app before July 2025. Version 4.26.4 fixes how new seeds are made.

Computors halted the network at tick 85,371,949. The last processed tick is stamped 09:32 UTC+8 on Oct 18, so the chain has now been stopped for about 17 hours. Qubic says 87.1% of the drained QU is frozen on the network. The other 12.9% went to MEXC, which froze the receiving account within about an hour. Exchanges have paused QUBIC deposits and withdrawals, and the price is down about 10% since the drain started.

If your seed fits one of those cases, move to a new seed from the fixed wallet once the chain restarts. Qubic says nobody from the team will message you first or charge for recovery.

$QUBIC
#Qubic #CryptoHack
NFA. DYOR.

🚨 $QUBIC SEED EXPLOIT FREEZES 87% OF STOLEN FUNDS! 🟢

📊 The seed randomness flaw let bad actors swipe 2.94 trillion QU from 1,404 wallets, but 87.1% of those coins sit frozen on‑chain, a massive liquidity wall. 🦈 Smart money is watching the pause at tick 85,371,949, gauging how the Computor quorum will redistribute the stash.

⚡ Version 4.26.4 patches the seed generator, and the network pause buys time for a recovery plan. 🌊 Until the frozen pool is unlocked, price pressure could swing sharply on sentiment alone.

💬 How do you think the freeze will shape $QUBIC ’s short‑term trajectory? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #QUBIC #Security #Crypto #Risk #Recovery

🔥 💎

【Market Update】After 2.94 trillion QU were stolen, the claims window will remain open until May 1, 2027. A vulnerability in Qubic’s seed generation affected 1,404 wallets, resulting in losses of about $1.4 million. The network has resumed processing transactions, and funds were moved to secure custodial wallets during the downtime. Claims will be decided by a panel of computor arbitrators. There’s only one key action to take: the old web wallet is no longer safe. Upgrade to version 4.26.4 and move your assets to a new address. For issues like weak seeds, do you think wallet providers should reimburse users in full, or is it more realistic for users to check and migrate their own funds? Let’s discuss in the comments.
$QUBIC $BTC $ETH
#Qubic #钱包安全 #Hack
(Source: Cryptopolitan)
⚠️Risk Disclaimer: The above is shared for informational purposes only and does not constitute investment advice. Investing involves risks; please exercise caution.

　　1,404 wallets and roughly $1.4 million worth of $QU tokens vanished just like that. This Qubic incident wasn’t caused by leaked private keys or phishing signatures. Instead, a vulnerability in the wallet seed generation process meant that seeds generated by some Apple devices and browsers were used by attackers to drain accounts. This detail deserves more attention than the amount lost: users followed the normal process to create wallets and store assets, but the problem was buried deep in the underlying toolchain.

　　Qubic has restarted its network. The block explorer shows that tick processing resumed at 20:00 on October 19, advancing beyond the 85,371,949 tick where it had previously stopped. The validators, known as Computors, approved the recovery plan. Affected users can now submit claims, with a deadline of May 1, 2027. The official recommendation is to recreate wallets using version 4.26.4 or later and transfer funds as soon as possible.

　　The restart and claims process may help cover some of the losses, but the seed vulnerability affected wallets generated by Apple devices and browsers—wallets that are fairly common among everyday users. When you create a wallet, do you make a point of checking the client version and seed generation environment? Or do you assume that “major platforms/mainstream devices” are safe? Share your habits in the comments.

#Qubic #钱包安全 #Blockchain

Qubic is back online, but updating the wallet doesn’t replace your old keys

My assessment: Qubic’s restart resolves the network outage, but it does not make old wallet seeds that are already compromised safe again. Anyone who created an account using a Qubic web wallet before version 4.26.4 should switch to a new wallet according to the official instructions, even if their balance hasn’t changed, rather than merely updating the software.

On October 20, Qubic announced that the network had been restored and the claims platform had opened, and said that the first batch of funds had been returned to verified holders. This marks progress in the recovery; it does not mean that all affected users have received their funds.

The key is to “change the keys.” The official instructions require users to upgrade to version 4.26.4 or later, generate a brand-new seed, and stop using the old wallet. The claims page also requires users to create a new receiving address on an unaffected device or browser. Importing an old seed into the updated software does not generate a new seed.

Why is proof of ownership also required? The official claims instructions note that attackers may also be able to generate valid signatures using weak seeds, so a single signature cannot prove who the rightful owner is. Affected users must therefore also provide exchange withdrawal receipts or records showing the source of funds before the incident. Don’t treat “I can sign” as a guarantee of a refund.

The claims window closes on May 1, 2027. Don’t hand over your seed under pressure: Qubic says it will never proactively DM users to ask for their seed, and it does not charge recovery fees. For frozen assets, use the claims process; for assets that aren’t frozen, follow the official migration instructions. Don’t mistake the opening of claims for an automatic refund.

Over the next 48 hours, I’ll be watching for the full technical report, the pace of returns, and any expansion in the scope of the impact. I’ll lower the risk assessment only after the new-seed generation mechanism has been verified and migration and returns can be confirmed. Even if recovery goes smoothly, I will not consider old seeds safe again.

#Qubic #钱包安全 #AssetSecurity

Qubic restores blockchain, opens refund claims after $1.4M hack

- Validators approve recovery
- Refund claims open until 1/5/2027
- Qubic blockchain restored after $1.4M shortfall
#BinanceSquare #CryptoNews #QUBIC

$qubic

#vlikevn #Titanbot

Source: CoinTelegraph

Qubic restarts blockchain and opens compensation claims after $1.4 million hack

- Qubic has restarted its blockchain following a $1.4 million hack.
- The network’s validators approved the recovery plan.
- Claims are open until May 1, 2027.
- The RSS source has not provided further details.

#Qubic #CryptoNews #Blockchain #Hack #BinanceSquare

$qubic

vlikevn Titanbot

Source: CoinTelegraph

Qubic hit the restart button—the chain that halted after the theft resumed producing blocks three days later. Around 1,404 wallets were hit in a theft worth about $1.4 million, but this time the team didn’t go silent: Computors voted to approve a recovery plan, and the claims portal is now live. Victims can file claims until May 1, 2027. 87.1% of the stolen funds are frozen on-chain, while the remaining 12.9% are locked by MEXC. The vulnerability is confirmed: the web wallet used Math.random() to generate seed phrases, relying on pseudorandom numbers for private keys—a disaster waiting to happen. Note: even if you weren’t robbed, you still need to migrate from any wallet older than version 4.26.4. Those old seeds are inherently weak. Now we’ll see how well the compensation process works. Do you hold any QU? Have you checked your address?

#Qubic #Web3 #链上安全 #HackingIncident

This SlowMist report makes for unsettling reading.

Qubic Wallet uses Math.random() to generate account seeds, and reuses the same random sequence in the dejaVu field of network packets. In a local PoC, SlowMist found that under certain conditions, observing six consecutive dejaVu values could reveal the PRNG’s 128-bit internal state, making it possible to reconstruct the 55-character account seed, derive the private key, and verify the match.

This attack does not require physical access; it offers a remote, scalable path to key recovery. Its practical exploitability still depends on factors such as network access, continuity of observations, and the order of random number calls. It is not yet possible to confirm whether the attackers previously used the same technique. On October 18, Qubic disclosed that 1,404 wallets had been compromised, with approximately 2.94 trillion QU stolen, due to insufficient randomness in some wallet seeds.

Two things to watch: first, whether the team provides a wallet patch and a migration plan; second, how compensation for historically exposed addresses will be determined. Which matters more to you: the patch or the compensation criteria?

Related asset: QUBIC. The outlook is bearish, with the impact concentrated among existing users of the wallet rather than the market as a whole.

Source: Wu Says

#QUBIC

Image 1: SlowMist: Qubic wallet RNG flaw may allow private key recovery after six network observations · Partial screenshot of the source page
Image source: https://www.wublock123.com/news/qubic-wallet-rng-flaw-private-key-recovery-after-6-observations-70368

⚠️The Qubic hack exposed something worse than a kill switch: 676 validators decided to freeze stolen funds, and now victims are waiting for permission from a handful of people to get their money back. Fake self-custody at its finest.

💬 "That AI is going to have to pay taxes in Argentina, and it’ll pay them in pesos."

How will regulatory and tax frameworks respond to the emergence of autonomous digital entities capable of accumulating and transferring value?

An insightful and necessary read👇

#Podcast #SDEX #Qubic #HackerAlert #AI $BTC

【Market Flash】1,404 wallets were drained within hours of 2.94 trillion QU, worth approximately $1.3 million. The culprit? The pseudorandom number generator Math.random()! SlowMist’s post-mortem: while the theoretical seed space was enormous, in practice it was reduced to about 2^32 possibilities—small enough to brute-force. Plaintext leaked in request headers could be observed six times to recover private keys. About 87.1% of the stolen funds have been frozen on-chain, and the remaining 12.9% were frozen by MEXC. Version 4.26.4 has switched to a secure random number generator. But old seeds won’t become secure automatically. Is your wallet still gambling on luck?
$QUBIC $BTC $ETH
#Qubic #钱包安全 #SlowMist
(Source: CryptoBriefing/SlowMist)
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risks; please exercise caution when entering the market.