BTC $82,690 
ETH $2,446 
USDT $0.9992 
BNB $739.48 
XRP $1.33 
USDC $0.9997 
SOL $106.06 
TRX $0.3308 
FIGR_HELOC $1.03 
ZEC $1,263 Qubic restarts network and opens claims after wallet drain
Validators approved a recovery plan after an attacker drained about $1.4 million in QU from 1,404 wallets.
Key takeaways
- 1,404 wallets were hit. An attacker drained roughly $1.4 million in QU from 1,404 accounts.
- Most tokens stayed put. Qubic reported that 87.1% of the stolen QU remained immobilized on-chain.
- Claims close May 1, 2027. Affected holders have until May 1, 2027, to submit a claim.
What happened
Qubic restarted its network and launched a recovery process after a wallet seed vulnerability let an attacker drain roughly $1.4 million in QU tokens from 1,404 accounts. The chain resumed processing ticks at 8:00 pm on Oct. 19, moving past tick 85,371,949, where it had been halted.
The project said its validators, known as Computors, approved a recovery plan and that a claims platform is now open. Affected users can check their address and submit a claim until May 1, 2027.
Qubic halted the network to stop further movement of stolen funds. It traced the flaw to predictable wallet seeds produced by its web wallet on certain Apple devices and browsers, and said the seed-generation issue was fixed in the latest web wallet version.
Why it matters
The drain hit many wallets in a short window. The attacker moved approximately 2.94 trillion QU from 1,404 wallets between 23:42 UTC on 17 October and 01:26 UTC on 18 October, under two hours.
Most of the stolen tokens did not reach open markets. Qubic reported that 87.1% of the stolen QU remained immobilized on-chain, while the remaining 12.9% was sent to MEXC, which froze the receiving account.
Qubic told users that wallets created with the web wallet before version 4.26.4, released 19 October, should be treated as insecure even if funds were untouched. The team advised updating, creating a new wallet and moving funds, and said the old wallet should never be used again.
What is still unclear
- Qubic had not specified how the affected wallet funds would be recovered or when normal network operations would resume, according to the earlier report.
Questions readers ask
How much was stolen in the Qubic wallet drain?
An attacker drained roughly $1.4 million in QU tokens from 1,404 accounts, according to Qubic. A separate incident notice put the amount at approximately 2.94 trillion QU.
Can affected Qubic users still file a claim?
Yes. Qubic opened a claims platform, and affected users have until May 1, 2027, to submit a claim.
What caused the Qubic wallet vulnerability?
Qubic attributed the incident to insufficient randomness in wallet-seed generation on certain Apple-device and browser combinations, not to a flaw in the Qubic protocol.
Which Qubic web wallet version is safe?
Qubic said wallets created before web wallet version 4.26.4, released 19 October, should be treated as insecure, and it advised users to update and create a new wallet.
