Qubic experienced a security incident affecting 1,404 wallets with 2.94 trillion QU stolen due to weak seed generation on specific devices and browsers; 87.1% of funds remain frozen on-chain.
Security & Exploits ·
A security incident on the Qubic network resulted in approximately 2.94 trillion QU being stolen from 1,404 wallets, according to reporting on the incident. The root cause was traced to deficient seed generation mechanisms on particular devices and browsers for wallets created before October 18. The Qubic team characterized the vulnerability as a flaw in how cryptographic seeds were produced rather than a broader network compromise.
In response, the Qubic development team deployed a patch in version 4.26.4 to remedy the seed generation vulnerability. A significant portion of the pilfered tokens—87.1%—remain locked or frozen within the network's on-chain systems, limiting immediate movement of the funds. The team is attempting to locate and contact affected users while also recommending that victims file reports with relevant authorities.
Key uncertainties persist around the timeline of discovery, the exact mechanism that enabled exploitation, and whether affected users had any warning signs before their wallets were drained. The status of recovery efforts for the frozen assets and the broader security audit of the seed generation process remain unclear.