Qubic said an attacker compromised 1,404 wallets and drained approximately 2.94 trillion QU between 23:42 UTC on October 17 and 01:26 UTC on October 18. The exploit used insufficient randomness in the wallet seed-generation mechanism, not a flaw in the Qubic protocol.
Why it matters
Qubic halted network transactions at tick 85,371,949 after identifying the breach. The incident puts wallet-generation security at the center of the response, while the network's core protocol was not identified as the source of the vulnerability.
Market impact
Some 87.1% of the stolen funds remain on the network and are frozen. The remaining 12.9% moved to MEXC, where the receiving account was also frozen, while other exchanges suspended QUBIC deposits and withdrawals.
Qubic fixed the seed-generation issue in version 4.26.4. Further resolution will be determined by the Computor quorum under the network's rules.
Frequently asked questions
-
How many Qubic wallets were compromised in the attack?
The attacker compromised 1,404 Qubic wallets.
-
How much QU did the attacker drain?
Approximately 2.94 trillion QU was drained between 23:42 UTC on October 17 and 01:26 UTC on October 18.
-
What vulnerability enabled the Qubic wallet exploit?
The exploit used insufficient randomness in the wallet seed-generation mechanism. Qubic said the vulnerability did not originate in the core protocol.
-
How much of the stolen QU remains frozen?
Some 87.1% of the stolen funds remain on the network and are frozen. The remaining 12.9% was transferred to MEXC, where the receiving account was also frozen.
-
What did Qubic do after identifying the exploit?
Qubic halted network transactions at tick 85,371,949 and fixed the seed-generation issue in version 4.26.4. Further resolution will be determined by the Computor quorum.
WuBlockchain