Qubic Pushes Back on Hack Claims: Weak Wallet Seeds Were to Blame

Qubic has confirmed that an attacker drained 1,404 wallets, stealing round 2.94 trillion QU throughout a safety incident between October 17 and 18.

The community mentioned the issue got here from weak pockets seed technology, not a flaw within the Qubic protocol itself.

Weak Wallet Seeds

According to the replace, some pockets seeds have been created with inadequate randomness, making them simpler to compromise. The affected seeds have been generated on iPhones and iPads utilizing any browser earlier than October 18, on Macs utilizing Safari earlier than that date, or by means of the Qubic iOS app earlier than July 2025.

Qubic’s validators, often known as Computors, coordinated a halt at tick 85,371,949 to stop additional motion of the stolen funds. With transactions paused, 87.1% of the drained funds stay on the community and frozen. The different 12.9% was despatched to MEXC, which froze the receiving account inside about an hour. Exchanges have additionally been notified and have suspended QUBIC deposits and withdrawals.

The workforce asserted that the seed technology situation has been fastened in model 4.26.4. No new weak seeds may be created underneath the corrected system. The subsequent steps will rely on the Computor quorum, which is able to resolve how the incident is resolved underneath the community’s guidelines. The Core workforce is figuring out affected identities and making ready choices for the quorum. A group ballot can be open on Discord to collect suggestions.

The layer-1 blockchain community has urged affected customers to report the incident to native police or cybercrime authorities. Reports ought to embody the pockets ID, the quantity misplaced, and the transaction hyperlink from the Qubic explorer.

September Nightmare

The Qubic incident comes after a expensive September for the crypto trade. As reported by CryptoPotato, PeckShield counted 55 main crypto hacks throughout the month, as losses reached nearly $766.5 million. That was round 462% larger than August’s $136.3 million.

Two incidents accounted for many of the injury. The Bitget breach concerned round $387 million, whereas the Liquid Network theft totaled roughly $320 million. Liquid later recovered $285 million. Bitget CEO Gracy Chen said an attacker exploited a backend system to manipulate transaction knowledge and bypass authorization checks. The change plans to cowl the loss by means of its User Protection Fund, which holds greater than $464 million.

The Liquid Network theft, on the opposite hand, involved roughly 4,000 BTC withdrawn from its federation pockets. The attacker promised to return the funds after community nodes have been patched, although Ledger CTO Charles Guillemet questioned whether or not the attacker was a respectable safety researcher.

The put up Qubic Pushes Back on Hack Claims: Weak Wallet Seeds Were to Blame appeared first on CryptoPotato.