qubic

Qubic just became the latest L1 to learn that "decentralized" has an emergency brake.

The chain halted Sunday after an attacker drained roughly $1.4 million in QU from 1,404 accounts by exploiting predictable wallet seeds — a weak random-number generator in Qubic's web wallet on certain Apple devices and browsers. Validators ("Computors") froze block production to stop the funds moving, then approved a recovery plan.

The chain restarted at 8:00 pm on October 19, advancing past tick 85,371,949. A claims platform is now open, submissions accepted until May 1, 2027. The seed flaw was patched in web wallet v4.26.4 — any wallet created before that version should be treated as compromised: move your funds, abandon the old wallet.

The honest read: the halt worked and most stolen funds never reached an exchange. But a chain whose validators can freeze it on demand has a trusted human layer — users buy decentralization theater until the theater has to save them.

If your L1 can hit pause to protect you, is it still permissionless — or just well-governed? NFA, always DYOR.

#Altcoins #CryptoNews #Qubic #HackRecovery

🚨 1,404 CRYPTO WALLETS DRAINED — AND JUST 6 NETWORK OBSERVATIONS COULD EXPOSE A PRIVATE KEY! 👀
Imagine securing your wallet, never sharing your seed… and still losing everything.
That's the nightmare behind the Qubic security incident.
💥 WHAT HAPPENED?
Between October 17 and 18, an attacker drained:
🔴 1,404 wallets
🔴 2.94 TRILLION QU
🔴 Approximately $1.3 MILLION
The Qubic network was halted to contain the damage.
According to the project, 87.1% of the stolen tokens were immobilized on-chain, while the remaining 12.9% reached MEXC, where the receiving account was frozen.
But the most disturbing discovery came later.
🔍 SLOWMIST'S FINDING
On October 20, security researchers revealed that Qubic's wallet used insufficiently secure randomness when generating certain private keys.
In a controlled test, researchers reconstructed a vulnerable private key using just SIX consecutive network observations under specific conditions.
⚠️ This does NOT prove the attacker used that exact method.
The issue was in wallet seed generation, not a confirmed breach of Qubic's core blockchain protocol.
🚨 WHO SHOULD PAY ATTENTION?
Users who created Qubic wallets before October 18 using:
• Any browser on iPhone or iPad
• Safari on Mac
Or the Qubic iOS app before July 2025.
Version 4.26.4 fixes NEW seed generation.
But previously generated weak seeds remain vulnerable.
💭 PANBAS TAKE:
The scariest part isn't the $1.3M theft.
It's that a wallet can look perfectly secure while its private key was predictable from the beginning.
Frozen funds aren't recovered funds.
If your wallet may be affected, follow official migration instructions. Never share your seed or trust unsolicited recovery offers.
👇 Would you trust a wallet again after discovering its keys weren't truly random?
#Qubic #WalletSecurity #CryptoExploit

Qubic says weak wallet seeds, not protocol flaw, caused a 2.94 trillion QU loss.

Qubic confirmed an attacker drained 1,404 wallets and stole about 2.94 trillion QU between October 17 and 18, citing weak wallet seed generation as the cause.

Seed randomness was insufficient on iPhones, iPads (any browser before Oct 18), Macs (Safari before that date) and the Qubic iOS app before July 2025.

Validators halted the chain at tick 85,371,949, freezing 87.1% of the funds; the remaining 12.9% moved to MEXC, which froze the account, and exchanges have paused QUBIC deposits and withdrawals.

September recorded 55 crypto hacks costing about $766.5 million—462% higher than August—with $387 million lost at Bitget and $320 million at Liquid Network.

How should layer‑1 blockchains improve seed generation to protect users without hurting usability?

#Qubic #CryptoSecurity #Blockchain #CryptoHacks

🚨 $QUBIC SECURITY BREACH DRAINS $1.4M AS OVER 1,400 COMPROMISED WALLETS GET SWEPT! 📉

Over 1,400 wallets holding 2.94 trillion $QUBIC were drained for roughly $1.4M, but the chain consensus itself never failed. 🔍 The critical vulnerability stemmed from insufficient randomness during account credential generation on Apple devices before October 18, leaving stored balances exposed.

Around 87% of the diverted liquidity sits frozen on-chain while the rest was halted at a major exchange. 💡 Halting execution or freezing tokens is not the same as returning capital, and software updates will never fix structurally vulnerable legacy setups. 💬 How often do you migrate your holdings to newly secured vaults to protect your capital? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #QUBIC #CryptoSecurity #OnChain #RiskManagement #Crypto

🛡️ ⚡

🚨 $QUBIC SECURITY BREACH REVEALS SEED VULNERABILITY 🦈

The incident underscores a classic smart‑money move: exploit predictable entropy before the network even feels the strain. 🦈 The 1,404 compromised wallets acted as a liquidity sink, draining $1.4 M while the blockchain itself stayed intact.

📌 Our analysis flags the seed‑generation window—iOS Safari and early Qubic app builds—as a high‑risk entropy pool. 📊 On‑chain data shows 87 % of the stolen tokens frozen, a clear sign that the attacker’s exit strategy was throttled by the network’s freeze logic.

The takeaway for any institutional holder: secure the key‑creation layer as fiercely as the custody layer. 🔍 Upgrade to deterministic wallets, audit RNG sources, and treat any pre‑Oct‑18 seed as compromised.

💬 What steps are you taking to audit seed randomness in your custodial pipelines? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #QUBIC #WalletSecurity #SmartMoney #Crypto #RiskManagement

🦈 📊

🚨 1,404 QUBIC WALLETS DRAINED — AND THE BLOCKCHAIN WASN'T THE WEAK POINT

Qubic just suffered a security incident involving roughly $1.4M in stolen tokens
But here's the detail that matters most 👀
The attacker didn't need to break the blockchain
Some wallet seeds were generated with insufficient randomness, making them potentially predictable

$BTC

🔴 What happened?
• 1,404 wallets drained
• 2.94 trillion QU stolen
• Qubic network halted to prevent further transfers
• 87.1% of stolen funds frozen on-chain
• Remaining funds reportedly frozen at ME.XC

⚠️ Here's the bigger warning
Affected seeds include those created before October 18 using:
• Any browser on iPhone or iPad
• Safari on Mac
• Qubic's iOS app before July 2025
Updating wallet software doesn't make an old weak seed secure
And frozen funds aren't the same as recovered funds

$BNB

🔍 My security checklist
If your wallet falls into an affected category, treat the seed as compromised
Follow Qubic's official recovery instructions before moving funds to a newly generated secure wallet
Never enter your seed into a random recovery website
Your blockchain can be secure while your wallet is already compromised
The real security question isn't just where your assets live
It's how the keys protecting them were created

#Qubic #WalletSecurity

📰 MEXC and Bitget Halt Qubic Deposits and Withdrawals on Their Platforms
MEXC linked its suspension to a request from Qubic’s project team. Bitget cited wallet maintenance.
Source : Econotimes
Time : 2026-10-18 15:27:05
Credit : miriam hart
#bitget #crypto_exchanges #qubic #mexc
$BGB
Share your opinion in the comment section below

Qubic Halts Network Following Wallet Exploit and Outlines Recovery Vote

WHAT HAPPENED
▪️ An attacker drained 1.4K wallets with weak seeds, prompting Qubic to freeze its chain.
▪️ Qubic stated 87.1% of the funds remain onchain, while the rest were frozen at MEXC as validators prepare a recovery vote.

WHY IT MATTERS FOR TRADERS
Network halts may dampen participant confidence and temporarily constrain onchain liquidity. Validator-led asset recovery processes can also influence broader perceptions of governance and settlement finality.

MARKET SNAPSHOT
▪️ $BTC: 82,484.00 USD, up 0.8% (24h), 4H RSI 54.8
▪️ Range to watch: 80,684.36 support / 82,940.81 resistance

How do validator recovery votes influence your view of network governance and risk?

Source: Cointelegraph

Not financial advice. Always DYOR.
Like & Follow for Daily Trade Analytics & Insider News. @MistralAK

#TrendingTopic #Qubic #HotTrends

An attacker drained 1,404 Qubic wallets between 07:42 and 09:26 UTC+8 on Oct 18. Qubic puts the total at about 2.94 trillion QU. At CoinGecko's price tonight that is about $1.25M, roughly $900 per wallet on average and about 2% of the circulating supply.

The weak spot was wallet seed generation, not the protocol. Some seeds were made with too little randomness, so the attacker could work them out. Qubic says affected seeds were made on an iPhone or iPad in any browser before Oct 18, in Safari on a Mac before Oct 18, or in the Qubic iOS app before July 2025. Version 4.26.4 fixes how new seeds are made.

Computors halted the network at tick 85,371,949. The last processed tick is stamped 09:32 UTC+8 on Oct 18, so the chain has now been stopped for about 17 hours. Qubic says 87.1% of the drained QU is frozen on the network. The other 12.9% went to MEXC, which froze the receiving account within about an hour. Exchanges have paused QUBIC deposits and withdrawals, and the price is down about 10% since the drain started.

If your seed fits one of those cases, move to a new seed from the fixed wallet once the chain restarts. Qubic says nobody from the team will message you first or charge for recovery.

$QUBIC
#Qubic #CryptoHack
NFA. DYOR.

🚨 $QUBIC SEED EXPLOIT FREEZES 87% OF STOLEN FUNDS! 🟢

📊 The seed randomness flaw let bad actors swipe 2.94 trillion QU from 1,404 wallets, but 87.1% of those coins sit frozen on‑chain, a massive liquidity wall. 🦈 Smart money is watching the pause at tick 85,371,949, gauging how the Computor quorum will redistribute the stash.

⚡ Version 4.26.4 patches the seed generator, and the network pause buys time for a recovery plan. 🌊 Until the frozen pool is unlocked, price pressure could swing sharply on sentiment alone.

💬 How do you think the freeze will shape $QUBIC ’s short‑term trajectory? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #QUBIC #Security #Crypto #Risk #Recovery

🔥 💎

Qubic is back online, but updating the wallet doesn’t replace your old keys

My assessment: Qubic’s restart resolves the network outage, but it does not make old wallet seeds that are already compromised safe again. Anyone who created an account using a Qubic web wallet before version 4.26.4 should switch to a new wallet according to the official instructions, even if their balance hasn’t changed, rather than merely updating the software.

On October 20, Qubic announced that the network had been restored and the claims platform had opened, and said that the first batch of funds had been returned to verified holders. This marks progress in the recovery; it does not mean that all affected users have received their funds.

The key is to “change the keys.” The official instructions require users to upgrade to version 4.26.4 or later, generate a brand-new seed, and stop using the old wallet. The claims page also requires users to create a new receiving address on an unaffected device or browser. Importing an old seed into the updated software does not generate a new seed.

Why is proof of ownership also required? The official claims instructions note that attackers may also be able to generate valid signatures using weak seeds, so a single signature cannot prove who the rightful owner is. Affected users must therefore also provide exchange withdrawal receipts or records showing the source of funds before the incident. Don’t treat “I can sign” as a guarantee of a refund.

The claims window closes on May 1, 2027. Don’t hand over your seed under pressure: Qubic says it will never proactively DM users to ask for their seed, and it does not charge recovery fees. For frozen assets, use the claims process; for assets that aren’t frozen, follow the official migration instructions. Don’t mistake the opening of claims for an automatic refund.

Over the next 48 hours, I’ll be watching for the full technical report, the pace of returns, and any expansion in the scope of the impact. I’ll lower the risk assessment only after the new-seed generation mechanism has been verified and migration and returns can be confirmed. Even if recovery goes smoothly, I will not consider old seeds safe again.

#Qubic #钱包安全 #AssetSecurity

Qubic restores blockchain, opens refund claims after $1.4M hack

- Validators approve recovery
- Refund claims open until 1/5/2027
- Qubic blockchain restored after $1.4M shortfall
#BinanceSquare #CryptoNews #QUBIC

$qubic

#vlikevn #Titanbot

Source: CoinTelegraph

Qubic restarts blockchain and opens compensation claims after $1.4 million hack

- Qubic has restarted its blockchain following a $1.4 million hack.
- The network’s validators approved the recovery plan.
- Claims are open until May 1, 2027.
- The RSS source has not provided further details.

#Qubic #CryptoNews #Blockchain #Hack #BinanceSquare

$qubic

vlikevn Titanbot

Source: CoinTelegraph

Qubic hit the restart button—the chain that halted after the theft resumed producing blocks three days later. Around 1,404 wallets were hit in a theft worth about $1.4 million, but this time the team didn’t go silent: Computors voted to approve a recovery plan, and the claims portal is now live. Victims can file claims until May 1, 2027. 87.1% of the stolen funds are frozen on-chain, while the remaining 12.9% are locked by MEXC. The vulnerability is confirmed: the web wallet used Math.random() to generate seed phrases, relying on pseudorandom numbers for private keys—a disaster waiting to happen. Note: even if you weren’t robbed, you still need to migrate from any wallet older than version 4.26.4. Those old seeds are inherently weak. Now we’ll see how well the compensation process works. Do you hold any QU? Have you checked your address?

#Qubic #Web3 #链上安全 #HackingIncident

This SlowMist report makes for unsettling reading.

Qubic Wallet uses Math.random() to generate account seeds, and reuses the same random sequence in the dejaVu field of network packets. In a local PoC, SlowMist found that under certain conditions, observing six consecutive dejaVu values could reveal the PRNG’s 128-bit internal state, making it possible to reconstruct the 55-character account seed, derive the private key, and verify the match.

This attack does not require physical access; it offers a remote, scalable path to key recovery. Its practical exploitability still depends on factors such as network access, continuity of observations, and the order of random number calls. It is not yet possible to confirm whether the attackers previously used the same technique. On October 18, Qubic disclosed that 1,404 wallets had been compromised, with approximately 2.94 trillion QU stolen, due to insufficient randomness in some wallet seeds.

Two things to watch: first, whether the team provides a wallet patch and a migration plan; second, how compensation for historically exposed addresses will be determined. Which matters more to you: the patch or the compensation criteria?

Related asset: QUBIC. The outlook is bearish, with the impact concentrated among existing users of the wallet rather than the market as a whole.

Source: Wu Says

#QUBIC

Image 1: SlowMist: Qubic wallet RNG flaw may allow private key recovery after six network observations · Partial screenshot of the source page
Image source: https://www.wublock123.com/news/qubic-wallet-rng-flaw-private-key-recovery-after-6-observations-70368

⚠️The Qubic hack exposed something worse than a kill switch: 676 validators decided to freeze stolen funds, and now victims are waiting for permission from a handful of people to get their money back. Fake self-custody at its finest.

💬 "That AI is going to have to pay taxes in Argentina, and it’ll pay them in pesos."

How will regulatory and tax frameworks respond to the emergence of autonomous digital entities capable of accumulating and transferring value?

An insightful and necessary read👇

#Podcast #SDEX #Qubic #HackerAlert #AI $BTC

【Market Flash】1,404 wallets were drained within hours of 2.94 trillion QU, worth approximately $1.3 million. The culprit? The pseudorandom number generator Math.random()! SlowMist’s post-mortem: while the theoretical seed space was enormous, in practice it was reduced to about 2^32 possibilities—small enough to brute-force. Plaintext leaked in request headers could be observed six times to recover private keys. About 87.1% of the stolen funds have been frozen on-chain, and the remaining 12.9% were frozen by MEXC. Version 4.26.4 has switched to a secure random number generator. But old seeds won’t become secure automatically. Is your wallet still gambling on luck?
$QUBIC $BTC $ETH
#Qubic #钱包安全 #SlowMist
(Source: CryptoBriefing/SlowMist)
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risks; please exercise caution when entering the market.

🚨 $QUBIC: AN ATTACK AFFECTED 1,404 WALLETS AND FORCED THE NETWORK TO SHUT DOWN

Qubic reported that between October 17 and 18, an attacker stole approximately 2.94 trillion QU, worth around US$1.4 million at the time of the incident.

🔎 WHAT HAPPENED?

The problem was with the generation of some recovery seeds: the secret words that allow access to a wallet.

Because they were not generated with enough randomness, some could be discovered by attackers.

⚠️ WHO MIGHT BE AFFECTED?

According to the project, users who created their seeds:

• On an iPhone or iPad, before 10/18/2026.
• In Safari on a Mac, before 10/18/2026.
• In the Qubic iOS app, before July 2025.

This does NOT mean that all Apple wallets or other cryptocurrencies are vulnerable.

🛑 WHAT MEASURES WERE TAKEN?

The network was shut down to limit further movement of funds.

Qubic reported that approximately 87.1% of the stolen tokens were immobilized on the network and that MEXC restricted the account that received the rest.

But frozen funds do NOT mean recovered funds.

🛡️ WHAT SHOULD YOU DO IF YOU USE QUBIC?

Check the official announcements. Updating the app does not make a compromised old seed safe.

Do not share your recovery words or trust supposed recovery services.

📌 THE KEY TAKEAWAY

A cryptocurrency's security also depends on how its users' keys are generated and protected.

Source: Qubic announcement dated 10/18/2026.

💬 Do you think stopping a blockchain during an attack protects users or creates another problem?

#Qubic #CryptoSecurity

A blockchain that can be stopped just like that: a weak-mnemonic vulnerability in Qubic let hackers drain over 1,400 wallets, stealing $1.4 million (2.94 trillion QU). The team urgently froze the entire network at tick 85,371,949. 87.1% of the funds are still frozen on-chain; the remaining 12.9% was transferred to MEXC, and the exchange froze the account within an hour. The postmortem stings even more: the web wallet used Math.random() to generate seeds. It wasn’t until the October 18 version that it switched to crypto.getRandomValues(); old seeds are still unsafe. The team insists this wasn’t a hack, but a “wallet hygiene issue.” There’s no restart date yet; they’re waiting for a vote by Computors. Market open: A) Halting the chain to limit losses—perfect move / B) The chain is stopped, and you’re still talking about decentralization. Sound off. $BTC $ETH $SOL #Qubic #黑客 #Security

🔐 Poor security can cost a lot in crypto.

On October 19, reports said an attack on the Qubic network had affected more than 1,400 accounts, with around $1.4 million in reported losses.

This incident is a reminder of an essential rule: security doesn’t depend on the blockchain alone. Generating keys and recovery phrases is just as important.

Never share your recovery phrase, avoid suspicious key generators, and always check official security alerts.

Do you think users still underestimate the importance of wallet security?

#CryptoSecurity #blockchain #Qubic