[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 18 sources · 3 days · First seen · Last updated

Qubic blockchain security exploit and recovery

Overview

The Qubic layer-1 blockchain halted mainnet operations following a security exploit that drained approximately 2.94 trillion QU tokens, valued at roughly $1.3 to $1.4 million, from over 1,400 user wallets. Developers identified the cause as a vulnerability in how certain wallet recovery seeds were generated on specific software environments, such as Safari on Mac and various iOS devices. The issue was attributed to the use of the non-cryptographic JavaScript Math.random() function instead of a secure alternative.

Validators, known as ‘Computors’, paused the network to prevent further asset movement. While a significant portion of the stolen funds remained frozen on the network or at exchanges like MEXC and Bitget, the project has since moved toward restoration.

Qubic has resumed network processing and initiated a recovery procedure. A fix for the seed-generation flaw was released in web wallet version 4.26.4. To facilitate the return of assets, the project launched a dedicated claims platform where affected users can submit claims until May 1, 2027. Users are advised to migrate funds from any wallets created via the web wallet prior to the fix.

Entities

Qubic · MEXC · Bitget · Apple

Timeline

  1. [TECHNOLOGY] 6 sources
    Qubic restarts blockchain following $1.4 million hack

    Qubic has restarted its blockchain and launched a recovery platform after a wallet seed vulnerability led to a $1.4 million theft across 1,404 accounts.

  2. [TECHNOLOGY] 13 sources
    Qubic halts blockchain after $1.4 million wallet exploit

    Qubic halted its blockchain after an attacker exploited weak wallet seed generation to steal $1.4 million from 1,400+ accounts. Most funds remain frozen on-chain or at the MEXC exchange.

Sources

blockonomi.com · blocktempo.com · btcwires.com · cointelegraph.com · crypto.news · cryptobreaking.com · cryptobriefing.com · cryptoninjas.net · cryptopolitan.com · cryptoslate.com · ethnews.com · finex.cz · news.bitcoin.com · spacemoney.com.br · stranotizie.it · svetapple.sk · techreport.com · tokenpost.com