qubic

Qubic just became the latest L1 to learn that "decentralized" has an emergency brake.

The chain halted Sunday after an attacker drained roughly $1.4 million in QU from 1,404 accounts by exploiting predictable wallet seeds — a weak random-number generator in Qubic's web wallet on certain Apple devices and browsers. Validators ("Computors") froze block production to stop the funds moving, then approved a recovery plan.

The chain restarted at 8:00 pm on October 19, advancing past tick 85,371,949. A claims platform is now open, submissions accepted until May 1, 2027. The seed flaw was patched in web wallet v4.26.4 — any wallet created before that version should be treated as compromised: move your funds, abandon the old wallet.

The honest read: the halt worked and most stolen funds never reached an exchange. But a chain whose validators can freeze it on demand has a trusted human layer — users buy decentralization theater until the theater has to save them.

If your L1 can hit pause to protect you, is it still permissionless — or just well-governed? NFA, always DYOR.

#Altcoins #CryptoNews #Qubic #HackRecovery

🚨 1,404 CRYPTO WALLETS DRAINED — AND JUST 6 NETWORK OBSERVATIONS COULD EXPOSE A PRIVATE KEY! 👀
Imagine securing your wallet, never sharing your seed… and still losing everything.
That's the nightmare behind the Qubic security incident.
💥 WHAT HAPPENED?
Between October 17 and 18, an attacker drained:
🔴 1,404 wallets
🔴 2.94 TRILLION QU
🔴 Approximately $1.3 MILLION
The Qubic network was halted to contain the damage.
According to the project, 87.1% of the stolen tokens were immobilized on-chain, while the remaining 12.9% reached MEXC, where the receiving account was frozen.
But the most disturbing discovery came later.
🔍 SLOWMIST'S FINDING
On October 20, security researchers revealed that Qubic's wallet used insufficiently secure randomness when generating certain private keys.
In a controlled test, researchers reconstructed a vulnerable private key using just SIX consecutive network observations under specific conditions.
⚠️ This does NOT prove the attacker used that exact method.
The issue was in wallet seed generation, not a confirmed breach of Qubic's core blockchain protocol.
🚨 WHO SHOULD PAY ATTENTION?
Users who created Qubic wallets before October 18 using:
• Any browser on iPhone or iPad
• Safari on Mac
Or the Qubic iOS app before July 2025.
Version 4.26.4 fixes NEW seed generation.
But previously generated weak seeds remain vulnerable.
💭 PANBAS TAKE:
The scariest part isn't the $1.3M theft.
It's that a wallet can look perfectly secure while its private key was predictable from the beginning.
Frozen funds aren't recovered funds.
If your wallet may be affected, follow official migration instructions. Never share your seed or trust unsolicited recovery offers.
👇 Would you trust a wallet again after discovering its keys weren't truly random?
#Qubic #WalletSecurity #CryptoExploit

🔐 Qubic restarts its chain after $1.4 million was stolen: the funds were recovered, but what about “immutability”?

This wasn’t a smart contract vulnerability—it was weak mnemonic generation.

According to multiple reports, attackers exploited weak-randomness mnemonics generated by some wallets in mobile browsers (some reports say Apple devices were involved), stealing about 2.94 trillion QU—worth roughly $1.4 million—from 1,404 accounts.

🔹 676 Computors (validator nodes) shut down the entire network, freezing about 87.1% of the stolen QU on-chain
🔹 The remaining 12.9% or so went to MEXC, and the receiving account has been frozen
🔹 Validators voted to approve a recovery plan, and the chain has restarted. Affected users can apply to recover their funds by May 1, 2027

The community is split: one side says the network worked as intended and saved users’ money; the other says that if a chain can be stopped and rolled back at will, then its finality depends on people, not code.

My take: this is obviously a happy ending for the victims. But as a token holder, be clear-eyed: the power that can save you can also freeze your assets. This isn’t about right or wrong—it’s about the rules you’re willing to accept when choosing a chain.

A more practical lesson: the security of your mnemonic is only as strong as the tool that generated it. Don’t create wallets on websites, with browser extensions, or using untrusted tools. Use a reputable wallet app or hardware wallet. If your old wallet was created on a website, consider creating a new wallet and transferring your assets.

Would you rather use a chain that can be rolled back when something goes wrong, or one that no one can change?

#Qubic #钱包安全 #助记词 #BlockchainSecurity

【Market Update】After 2.94 trillion QU were stolen, the claims window will remain open until May 1, 2027. A vulnerability in Qubic’s seed generation affected 1,404 wallets, resulting in losses of about $1.4 million. The network has resumed processing transactions, and funds were moved to secure custodial wallets during the downtime. Claims will be decided by a panel of computor arbitrators. There’s only one key action to take: the old web wallet is no longer safe. Upgrade to version 4.26.4 and move your assets to a new address. For issues like weak seeds, do you think wallet providers should reimburse users in full, or is it more realistic for users to check and migrate their own funds? Let’s discuss in the comments.
$QUBIC $BTC $ETH
#Qubic #钱包安全 #Hack
(Source: Cryptopolitan)
⚠️Risk Disclaimer: The above is shared for informational purposes only and does not constitute investment advice. Investing involves risks; please exercise caution.

Qubic says weak wallet seeds, not protocol flaw, caused a 2.94 trillion QU loss.

Qubic confirmed an attacker drained 1,404 wallets and stole about 2.94 trillion QU between October 17 and 18, citing weak wallet seed generation as the cause.

Seed randomness was insufficient on iPhones, iPads (any browser before Oct 18), Macs (Safari before that date) and the Qubic iOS app before July 2025.

Validators halted the chain at tick 85,371,949, freezing 87.1% of the funds; the remaining 12.9% moved to MEXC, which froze the account, and exchanges have paused QUBIC deposits and withdrawals.

September recorded 55 crypto hacks costing about $766.5 million—462% higher than August—with $387 million lost at Bitget and $320 million at Liquid Network.

How should layer‑1 blockchains improve seed generation to protect users without hurting usability?

#Qubic #CryptoSecurity #Blockchain #CryptoHacks

　　1,404 wallets and roughly $1.4 million worth of $QU tokens vanished just like that. This Qubic incident wasn’t caused by leaked private keys or phishing signatures. Instead, a vulnerability in the wallet seed generation process meant that seeds generated by some Apple devices and browsers were used by attackers to drain accounts. This detail deserves more attention than the amount lost: users followed the normal process to create wallets and store assets, but the problem was buried deep in the underlying toolchain.

　　Qubic has restarted its network. The block explorer shows that tick processing resumed at 20:00 on October 19, advancing beyond the 85,371,949 tick where it had previously stopped. The validators, known as Computors, approved the recovery plan. Affected users can now submit claims, with a deadline of May 1, 2027. The official recommendation is to recreate wallets using version 4.26.4 or later and transfer funds as soon as possible.

　　The restart and claims process may help cover some of the losses, but the seed vulnerability affected wallets generated by Apple devices and browsers—wallets that are fairly common among everyday users. When you create a wallet, do you make a point of checking the client version and seed generation environment? Or do you assume that “major platforms/mainstream devices” are safe? Share your habits in the comments.

#Qubic #钱包安全 #Blockchain

Qubic is back online, but updating the wallet doesn’t replace your old keys

My assessment: Qubic’s restart resolves the network outage, but it does not make old wallet seeds that are already compromised safe again. Anyone who created an account using a Qubic web wallet before version 4.26.4 should switch to a new wallet according to the official instructions, even if their balance hasn’t changed, rather than merely updating the software.

On October 20, Qubic announced that the network had been restored and the claims platform had opened, and said that the first batch of funds had been returned to verified holders. This marks progress in the recovery; it does not mean that all affected users have received their funds.

The key is to “change the keys.” The official instructions require users to upgrade to version 4.26.4 or later, generate a brand-new seed, and stop using the old wallet. The claims page also requires users to create a new receiving address on an unaffected device or browser. Importing an old seed into the updated software does not generate a new seed.

Why is proof of ownership also required? The official claims instructions note that attackers may also be able to generate valid signatures using weak seeds, so a single signature cannot prove who the rightful owner is. Affected users must therefore also provide exchange withdrawal receipts or records showing the source of funds before the incident. Don’t treat “I can sign” as a guarantee of a refund.

The claims window closes on May 1, 2027. Don’t hand over your seed under pressure: Qubic says it will never proactively DM users to ask for their seed, and it does not charge recovery fees. For frozen assets, use the claims process; for assets that aren’t frozen, follow the official migration instructions. Don’t mistake the opening of claims for an automatic refund.

Over the next 48 hours, I’ll be watching for the full technical report, the pace of returns, and any expansion in the scope of the impact. I’ll lower the risk assessment only after the new-seed generation mechanism has been verified and migration and returns can be confirmed. Even if recovery goes smoothly, I will not consider old seeds safe again.

#Qubic #钱包安全 #AssetSecurity

Qubic restores blockchain, opens refund claims after $1.4M hack

- Validators approve recovery
- Refund claims open until 1/5/2027
- Qubic blockchain restored after $1.4M shortfall
#BinanceSquare #CryptoNews #QUBIC

$qubic

#vlikevn #Titanbot

Source: CoinTelegraph

Qubic restarts blockchain and opens compensation claims after $1.4 million hack

- Qubic has restarted its blockchain following a $1.4 million hack.
- The network’s validators approved the recovery plan.
- Claims are open until May 1, 2027.
- The RSS source has not provided further details.

#Qubic #CryptoNews #Blockchain #Hack #BinanceSquare

$qubic

vlikevn Titanbot

Source: CoinTelegraph

Qubic hit the restart button—the chain that halted after the theft resumed producing blocks three days later. Around 1,404 wallets were hit in a theft worth about $1.4 million, but this time the team didn’t go silent: Computors voted to approve a recovery plan, and the claims portal is now live. Victims can file claims until May 1, 2027. 87.1% of the stolen funds are frozen on-chain, while the remaining 12.9% are locked by MEXC. The vulnerability is confirmed: the web wallet used Math.random() to generate seed phrases, relying on pseudorandom numbers for private keys—a disaster waiting to happen. Note: even if you weren’t robbed, you still need to migrate from any wallet older than version 4.26.4. Those old seeds are inherently weak. Now we’ll see how well the compensation process works. Do you hold any QU? Have you checked your address?

#Qubic #Web3 #链上安全 #HackingIncident

🚨 $QUBIC SECURITY BREACH DRAINS $1.4M AS OVER 1,400 COMPROMISED WALLETS GET SWEPT! 📉

Over 1,400 wallets holding 2.94 trillion $QUBIC were drained for roughly $1.4M, but the chain consensus itself never failed. 🔍 The critical vulnerability stemmed from insufficient randomness during account credential generation on Apple devices before October 18, leaving stored balances exposed.

Around 87% of the diverted liquidity sits frozen on-chain while the rest was halted at a major exchange. 💡 Halting execution or freezing tokens is not the same as returning capital, and software updates will never fix structurally vulnerable legacy setups. 💬 How often do you migrate your holdings to newly secured vaults to protect your capital? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #QUBIC #CryptoSecurity #OnChain #RiskManagement #Crypto

🛡️ ⚡

🚨 $QUBIC SECURITY BREACH REVEALS SEED VULNERABILITY 🦈

The incident underscores a classic smart‑money move: exploit predictable entropy before the network even feels the strain. 🦈 The 1,404 compromised wallets acted as a liquidity sink, draining $1.4 M while the blockchain itself stayed intact.

📌 Our analysis flags the seed‑generation window—iOS Safari and early Qubic app builds—as a high‑risk entropy pool. 📊 On‑chain data shows 87 % of the stolen tokens frozen, a clear sign that the attacker’s exit strategy was throttled by the network’s freeze logic.

The takeaway for any institutional holder: secure the key‑creation layer as fiercely as the custody layer. 🔍 Upgrade to deterministic wallets, audit RNG sources, and treat any pre‑Oct‑18 seed as compromised.

💬 What steps are you taking to audit seed randomness in your custodial pipelines? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #QUBIC #WalletSecurity #SmartMoney #Crypto #RiskManagement

🦈 📊

🚨 1,404 QUBIC WALLETS DRAINED — AND THE BLOCKCHAIN WASN'T THE WEAK POINT

Qubic just suffered a security incident involving roughly $1.4M in stolen tokens
But here's the detail that matters most 👀
The attacker didn't need to break the blockchain
Some wallet seeds were generated with insufficient randomness, making them potentially predictable

$BTC

🔴 What happened?
• 1,404 wallets drained
• 2.94 trillion QU stolen
• Qubic network halted to prevent further transfers
• 87.1% of stolen funds frozen on-chain
• Remaining funds reportedly frozen at ME.XC

⚠️ Here's the bigger warning
Affected seeds include those created before October 18 using:
• Any browser on iPhone or iPad
• Safari on Mac
• Qubic's iOS app before July 2025
Updating wallet software doesn't make an old weak seed secure
And frozen funds aren't the same as recovered funds

$BNB

🔍 My security checklist
If your wallet falls into an affected category, treat the seed as compromised
Follow Qubic's official recovery instructions before moving funds to a newly generated secure wallet
Never enter your seed into a random recovery website
Your blockchain can be secure while your wallet is already compromised
The real security question isn't just where your assets live
It's how the keys protecting them were created

#Qubic #WalletSecurity

This SlowMist report makes for unsettling reading.

Qubic Wallet uses Math.random() to generate account seeds, and reuses the same random sequence in the dejaVu field of network packets. In a local PoC, SlowMist found that under certain conditions, observing six consecutive dejaVu values could reveal the PRNG’s 128-bit internal state, making it possible to reconstruct the 55-character account seed, derive the private key, and verify the match.

This attack does not require physical access; it offers a remote, scalable path to key recovery. Its practical exploitability still depends on factors such as network access, continuity of observations, and the order of random number calls. It is not yet possible to confirm whether the attackers previously used the same technique. On October 18, Qubic disclosed that 1,404 wallets had been compromised, with approximately 2.94 trillion QU stolen, due to insufficient randomness in some wallet seeds.

Two things to watch: first, whether the team provides a wallet patch and a migration plan; second, how compensation for historically exposed addresses will be determined. Which matters more to you: the patch or the compensation criteria?

Related asset: QUBIC. The outlook is bearish, with the impact concentrated among existing users of the wallet rather than the market as a whole.

Source: Wu Says

#QUBIC

Image 1: SlowMist: Qubic wallet RNG flaw may allow private key recovery after six network observations · Partial screenshot of the source page
Image source: https://www.wublock123.com/news/qubic-wallet-rng-flaw-private-key-recovery-after-6-observations-70368

⚠️The Qubic hack exposed something worse than a kill switch: 676 validators decided to freeze stolen funds, and now victims are waiting for permission from a handful of people to get their money back. Fake self-custody at its finest.

💬 "That AI is going to have to pay taxes in Argentina, and it’ll pay them in pesos."

How will regulatory and tax frameworks respond to the emergence of autonomous digital entities capable of accumulating and transferring value?

An insightful and necessary read👇

#Podcast #SDEX #Qubic #HackerAlert #AI $BTC

【Market Flash】1,404 wallets were drained within hours of 2.94 trillion QU, worth approximately $1.3 million. The culprit? The pseudorandom number generator Math.random()! SlowMist’s post-mortem: while the theoretical seed space was enormous, in practice it was reduced to about 2^32 possibilities—small enough to brute-force. Plaintext leaked in request headers could be observed six times to recover private keys. About 87.1% of the stolen funds have been frozen on-chain, and the remaining 12.9% were frozen by MEXC. Version 4.26.4 has switched to a secure random number generator. But old seeds won’t become secure automatically. Is your wallet still gambling on luck?
$QUBIC $BTC $ETH
#Qubic #钱包安全 #SlowMist
(Source: CryptoBriefing/SlowMist)
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risks; please exercise caution when entering the market.

📰 MEXC and Bitget Halt Qubic Deposits and Withdrawals on Their Platforms
MEXC linked its suspension to a request from Qubic’s project team. Bitget cited wallet maintenance.
Source : Econotimes
Time : 2026-10-18 15:27:05
Credit : miriam hart
#bitget #crypto_exchanges #qubic #mexc
$BGB
Share your opinion in the comment section below

A blockchain that can be stopped just like that: a weak-mnemonic vulnerability in Qubic let hackers drain over 1,400 wallets, stealing $1.4 million (2.94 trillion QU). The team urgently froze the entire network at tick 85,371,949. 87.1% of the funds are still frozen on-chain; the remaining 12.9% was transferred to MEXC, and the exchange froze the account within an hour. The postmortem stings even more: the web wallet used Math.random() to generate seeds. It wasn’t until the October 18 version that it switched to crypto.getRandomValues(); old seeds are still unsafe. The team insists this wasn’t a hack, but a “wallet hygiene issue.” There’s no restart date yet; they’re waiting for a vote by Computors. Market open: A) Halting the chain to limit losses—perfect move / B) The chain is stopped, and you’re still talking about decentralization. Sound off. $BTC $ETH $SOL #Qubic #黑客 #Security

🚨 $QUBIC: AN ATTACK AFFECTED 1,404 WALLETS AND FORCED THE NETWORK TO SHUT DOWN

Qubic reported that between October 17 and 18, an attacker stole approximately 2.94 trillion QU, worth around US$1.4 million at the time of the incident.

🔎 WHAT HAPPENED?

The problem was with the generation of some recovery seeds: the secret words that allow access to a wallet.

Because they were not generated with enough randomness, some could be discovered by attackers.

⚠️ WHO MIGHT BE AFFECTED?

According to the project, users who created their seeds:

• On an iPhone or iPad, before 10/18/2026.
• In Safari on a Mac, before 10/18/2026.
• In the Qubic iOS app, before July 2025.

This does NOT mean that all Apple wallets or other cryptocurrencies are vulnerable.

🛑 WHAT MEASURES WERE TAKEN?

The network was shut down to limit further movement of funds.

Qubic reported that approximately 87.1% of the stolen tokens were immobilized on the network and that MEXC restricted the account that received the rest.

But frozen funds do NOT mean recovered funds.

🛡️ WHAT SHOULD YOU DO IF YOU USE QUBIC?

Check the official announcements. Updating the app does not make a compromised old seed safe.

Do not share your recovery words or trust supposed recovery services.

📌 THE KEY TAKEAWAY

A cryptocurrency's security also depends on how its users' keys are generated and protected.

Source: Qubic announcement dated 10/18/2026.

💬 Do you think stopping a blockchain during an attack protects users or creates another problem?

#Qubic #CryptoSecurity