Key Points
- Qubic’s blockchain went back online Oct. 19 following an emergency halt triggered by theft from 1,404 wallets totaling approximately $1.3 million in QU tokens.
- The breach stemmed from inadequate wallet recovery seeds, not a vulnerability in the blockchain protocol.
- Wallets generated through iPhone and iPad browsers, Safari on Mac computers, and legacy Qubic iOS applications were vulnerable.
- Roughly 87.1% of the drained tokens remained on the blockchain, while MEXC exchange secured an account containing the remaining 12.9%.
- An official recovery portal is accepting victim claims with a deadline of May 1, 2027.
Qubic’s blockchain network has resumed operations following an emergency suspension triggered by an attack that drained approximately $1.3 million worth of QU tokens from 1,404 separate wallets.
The breach occurred on Oct. 18, with attackers siphoning roughly 2.94 trillion QU tokens within a span of less than two hours. Network validators—referred to as Computors in Qubic’s architecture—froze all transactions at tick 85,371,949 as an immediate countermeasure.
Transaction processing resumed by the evening hours of Oct. 19. The following day, Qubic announced validator consensus on a recovery framework, launched an official claims system, and initiated reimbursements to authenticated victims.
Vulnerability Originated in Wallet Software
The blockchain infrastructure itself remained secure throughout the incident. The vulnerability existed in how wallet recovery seeds—the critical strings of data that grant access to cryptocurrency holdings—were generated.
Earlier iterations of Qubic’s wallet application employed an insufficiently robust random-number generation mechanism. This weakness created predictable patterns in some recovery seeds.
The vulnerability specifically impacted wallets established via web browsers on Apple’s iPhone and iPad devices, the Safari browser on Mac computers, and earlier releases of Qubic’s iOS mobile application. This predictability enabled attackers to reverse-engineer seeds and obtain unauthorized access independently of user passwords.
Qubic addressed the security gap in wallet version 4.26.4, deployed approximately Oct. 19. The patch implemented a cryptographically stronger randomization method.
However, software updates cannot retroactively secure previously generated recovery seeds. Users who established wallets using compromised software versions must generate entirely new wallets and transfer their assets.
Merely accessing a vulnerable wallet through a different device provides no additional security.
Majority of Stolen Assets Immobilized; Claims Process Active
The attacker’s ability to liquidate stolen tokens was severely limited when Qubic suspended network activity. Approximately 87.1% of the drained tokens remained locked within the blockchain.
Cryptocurrency exchange MEXC intervened by freezing an account that held the remaining 12.9% of stolen funds. Qubic subsequently transferred the affected on-chain assets into secured escrow accounts, enabling validators to process verified reimbursements.
Affected users may file claims via Qubic’s authorized recovery portal through May 1, 2027. Claimants must supply their compromised wallet identity alongside a freshly created destination wallet address.
Additional requirements include a cryptographically signed ownership verification message and corroborating documentation. Successfully validated claims enter a seven-day challenge period prior to fund distribution.
Recovery of assets held at MEXC remains subject to the exchange’s internal procedures and potential law enforcement involvement.
Qubic has issued alerts regarding fraudulent recovery schemes. The project emphasized that authentic recovery assistance never requests wallet seed phrases or upfront payments.
Reimbursements to authenticated victims commenced Oct. 20, with the claims submission window extending through May 1, 2027.
Get 3 Free Stock Ebooks
Discover top-performing stocks in AI, Crypto, and Technology with expert analysis.
- Top 10 AI Stocks - Leading AI companies
- Top 10 Crypto Stocks - Blockchain leaders
- Top 10 Tech Stocks - Tech giants
