Loading prices…
🩸BEARISH

Qubic Exploit Drains 1,404 Wallets and Freezes 87.1% of QUBIC

The attack targeted wallet seed generation rather than the Qubic protocol, while exchange freezes and a software patch limit further movement.

Qubic said an attacker compromised 1,404 wallets and drained approximately 2.94 trillion QU between 23:42 UTC on October 17 and 01:26 UTC on October 18. The exploit used insufficient randomness in the wallet seed-generation mechanism, not a flaw in the Qubic protocol.

Why it matters

Qubic halted network transactions at tick 85,371,949 after identifying the breach. The incident puts wallet-generation security at the center of the response, while the network's core protocol was not identified as the source of the vulnerability.

Market impact

Some 87.1% of the stolen funds remain on the network and are frozen. The remaining 12.9% moved to MEXC, where the receiving account was also frozen, while other exchanges suspended QUBIC deposits and withdrawals.

Qubic fixed the seed-generation issue in version 4.26.4. Further resolution will be determined by the Computor quorum under the network's rules.

Frequently asked questions

  1. How many Qubic wallets were compromised in the attack?

    The attacker compromised 1,404 Qubic wallets.

  2. How much QU did the attacker drain?

    Approximately 2.94 trillion QU was drained between 23:42 UTC on October 17 and 01:26 UTC on October 18.

  3. What vulnerability enabled the Qubic wallet exploit?

    The exploit used insufficient randomness in the wallet seed-generation mechanism. Qubic said the vulnerability did not originate in the core protocol.

  4. How much of the stolen QU remains frozen?

    Some 87.1% of the stolen funds remain on the network and are frozen. The remaining 12.9% was transferred to MEXC, where the receiving account was also frozen.

  5. What did Qubic do after identifying the exploit?

    Qubic halted network transactions at tick 85,371,949 and fixed the seed-generation issue in version 4.26.4. Further resolution will be determined by the Computor quorum.

Source attribution
Aggregated from WuBlockchain · Verified · Last refreshed 1h ago
Open original →