Qubic has confirmed that an attacker drained 1,404 wallets, stealing round 2.94 trillion QU throughout a safety incident between October 17 and 18.
The community stated the issue got here from weak pockets seed technology, not a flaw within the Qubic protocol itself.
Weak Pockets Seeds
In line with the replace, some pockets seeds have been created with inadequate randomness, making them simpler to compromise. The affected seeds have been generated on iPhones and iPads utilizing any browser earlier than October 18, on Macs utilizing Safari earlier than that date, or by the Qubic iOS app earlier than July 2025.
Qubic’s validators, referred to as Computors, coordinated a halt at tick 85,371,949 to forestall additional motion of the stolen funds. With transactions paused, 87.1% of the drained funds stay on the community and frozen. The opposite 12.9% was despatched to MEXC, which froze the receiving account inside about an hour. Exchanges have additionally been notified and have suspended QUBIC deposits and withdrawals.
The workforce asserted that the seed technology problem has been mounted in model 4.26.4. No new weak seeds may be created underneath the corrected system. The subsequent steps will depend upon the Computor quorum, which can resolve how the incident is resolved underneath the community’s guidelines. The Core workforce is figuring out affected identities and making ready choices for the quorum. A group ballot can be open on Discord to assemble suggestions.
The layer-1 blockchain community has urged affected customers to report the incident to native police or cybercrime authorities. Reviews ought to embrace the pockets ID, the quantity misplaced, and the transaction hyperlink from the Qubic explorer.
September Nightmare
The Qubic incident comes after a expensive September for the crypto business. As reported by CryptoPotato, PeckShield counted 55 main crypto hacks through the month, as losses reached nearly $766.5 million. That was round 462% greater than August’s $136.3 million.
Two incidents accounted for many of the harm. The Bitget breach concerned round $387 million, whereas the Liquid Community theft totaled roughly $320 million. Liquid later recovered $285 million. Bitget CEO Gracy Chen stated an attacker exploited a backend system to govern transaction information and bypass authorization checks. The change plans to cowl the loss by its Consumer Safety Fund, which holds greater than $464 million.
The Liquid Community theft, alternatively, concerned roughly 4,000 BTC withdrawn from its federation pockets. The attacker promised to return the funds after community nodes have been patched, although Ledger CTO Charles Guillemet questioned whether or not the attacker was a authentic safety researcher.
The publish Qubic Pushes Again on Hack Claims: Weak Pockets Seeds Had been to Blame appeared first on CryptoPotato.