Qubic halts mainnet after wallet exploit drains 2.94 trillion QU
Layer 1 network Qubic halted transactions after an attacker exploited weak wallet seed generation to siphon 2.94 trillion QU—worth about $1.4 million—from 1,404 accounts.
Layer 1 network Qubic halted network transactions at tick 85,371,949 after an attacker drained approximately 2.94 trillion QU from 1,404 wallets, according to project disclosures shared by Wu Blockchain and reporting by Cointelegraph. Cointelegraph estimated the value of the drained tokens at roughly $1.4 million. The exploit occurred between 23:42 UTC on October 17 and 01:26 UTC on October 18, targeting accounts that suffered from insufficient randomness in their seed generation.[1][4][3]
Qubic stated that the breach did not stem from a vulnerability in the Qubic protocol itself, but rather in the seed-generation mechanism used by wallets. The issue has since been resolved in version 4.26.4, while Crypto Briefing noted that the incident highlighted vulnerabilities in third-party wallet software.[1][3]
Around 87.1% of the stolen funds remain frozen on the network, while the remaining 12.9% was transferred to crypto exchange MEXC, where the recipient account has also been frozen. Other exchanges suspended QUBIC deposits and withdrawals, and Qubic's Computor quorum of validators is preparing to vote on a recovery plan under network rules.[1][2]
Key facts
- An attacker drained about 2.94 trillion QU, valued at roughly $1.4 million, from 1,404 wallets between October 17 and October 18.
- Qubic halted network transactions at tick 85,371,949 following the incident.
- The vulnerability stemmed from insufficient randomness in wallet seed generation, not from the core Qubic protocol.
- Approximately 87.1% of the stolen funds remain frozen onchain, while 12.9% sent to MEXC was frozen in the receiving account.
- Qubic fixed the seed-generation vulnerability in software version 4.26.4.
- Network validators within the Computor quorum are preparing to vote on a recovery plan.
Sources · 4 sources
- WB
Wu Blockchain@WuBlockchainPost on X ·
Qubic Attack Drains 1,404 Wallets of Approximately 2.94 Trillion QU, With 87.1% of Stolen Funds Frozen Layer 1 network Qubic said in a post that between 23:42 UTC on October 17 and 01:26 UTC on October 18, an attacker exploited insufficient randomness in certain wallet seeds to compromise 1,404 wallets and drain approximately 2.94 trillion QU. The vulnerability originated in the seed-generation mechanism, not the Qubic protocol itself. Qubic halted network transactions at tick 85,371,949. Some 87.1% of the stolen funds remain on the network and are frozen, while the remaining 12.9% was transferred to MEXC, where the receiving account has also been frozen. Other exchanges have suspended QUBIC deposits and withdrawals. Qubic fixed the seed-generation issue in version 4.26.4, and any further resolution will be determined by the Computor quorum under the network’s rules.
Open source - CT
Coin TelegraphArticle ·
Qubic freezes chain after attacker drains 1.4K wallets with weak seeds Qubic says 87.1% of the stolen funds remain onchain and the rest were frozen at crypto exchange MEXC, as network validators prepare to vote on a recovery plan.
Open source - CB
Crypto BriefingArticle ·
Qubic halts mainnet after wallet drain empties 1,404 accounts The incident highlights vulnerabilities in third-party wallet software, impacting user trust and necessitating stronger security measures in decentralized networks. The post Qubic halts mainnet after wallet drain empties 1,404 accounts appeared first on Crypto Briefing .
Open source - CO
Cointelegraph@CointelegraphPost on X ·
🚨 NEW: Qubic halts its network after an attacker exploited weak wallet seeds to drain about $1.4M from over 1,400 accounts. https://t.co/ce7wsWrKsn
Open source