How an Attacker Emptied 1,404 Qubic Wallets Without Breaking the Blockchain

Qubic (QUBIC) fell 5.2% over the previous 24 hours to $0.0000004394, based on BeInCrypto Markets information. The drop got here after an attacker drained 1,404 Qubic wallets and validators halted the community.

The whole crypto market declined 2.8% over the similar window, so QUBIC fell almost twice as exhausting. The steeper slide strains up with a safety incident the mission disclosed on October 18.

Follow us on X to get the newest information because it occurs

How Weak Seeds Opened 1,404 Wallets

Qubic, the AI-based mining protocol behind final 12 months’s disputed Monero majority claim, stated the drain took beneath two hours. It started at 23:42 UTC on October 17 and ended at 01:26 UTC on October 18.

The attacker took about 2.94 trillion QU, value roughly $1.29 million at the present value. Qubic traced the theft to pockets seeds generated with insufficient randomness. 

Qubic stated seeds created in any browser on an iPhone or iPad earlier than October 18, 2026, have been affected. The similar applies to seeds made with Safari on a Mac earlier than that date. 

Seeds from the Qubic iOS app created earlier than July 2025 have been additionally affected. A repair in model 4.26.4 stops any new weak seeds from being generated.

“The difficulty was in seed technology, not in the Qubic protocol itself,” the workforce said.

Frozen Funds Leave QUBIC Holders Waiting on the Quorum

Qubic’s Computors coordinated a halt at tick 85,371,949. The pause stops all transactions, which retains the stolen funds locked in place.

Qubic stated 87.1% of the drained funds stayed on its community. MEXC received the different 12.9% and froze the receiving account inside roughly an hour. Exchanges have additionally suspended QUBIC deposits and withdrawals.

“Any decision is a call for the Computor quorum, beneath the guidelines of the community,” the submit added.

Meanwhile, Qubic’s Core workforce is mapping affected identities and drafting proposals for the quorum. 

Cysic Bridge Mint Adds to October’s Exploit Tally

A separate exploit hit Cysic’s cross-chain bridge on October 17, the similar day Qubic’s drain started. The Cysic Foundation said an attacker minted 10 million unauthorized Cysic (CYS) tokens on BNB Smart Chain.

Early findings present the attacker breached a database behind the bridge’s providers. It then exploited flawed processing logic to forge a mint message.

Cysic blacklisted the recipient tackle inside about 76 minutes, limiting the roughly 2.8 million CYS nonetheless held there. The bridge stays closed, and Cysic says no current consumer property have been stolen. 

The workforce has not but quantified the harm, noting that the minted quantity doesn’t equal the remaining greenback loss.

The two incidents add to 11 exploits DefiLlama has recorded up to now in October. Those account for about $6.2 million in disclosed losses. The largest was a $3.8 million bridge logic flaw at NEAR Intents on October 1.

Subscribe to our YouTube channel to observe leaders and journalists present knowledgeable insights

The submit How an Attacker Emptied 1,404 Qubic Wallets Without Breaking the Blockchain appeared first on BeInCrypto.