TLDR
- Qubic restarted its network after a wallet seed flaw let an attacker drain about $1.4 million in QU tokens from 1,404 accounts.
- The network resumed processing ticks at 8:00 pm on Oct. 19, after halting at tick 85,371,949 on Sunday.
- Validators known as Computors approved a recovery plan, and a claims platform is now open.
- Affected users have until May 1, 2027 to submit claims.
- Qubic says wallets made before web wallet version 4.26.4 should be treated as insecure.
Layer-1 blockchain Qubic has restarted its network and opened a recovery process. The move follows a wallet seed vulnerability that let an attacker take about $1.4 million in QU tokens.
The Qubic network is live again.
The Computor quorum approved the recovery, the reclaim platform is open, and the first funds have already gone back to verified owners.
Here’s what’s new and what you need to do. pic.twitter.com/2pIM0IfiFB
— Qubic (@_Qubic_) October 20, 2026
The attacker drained funds from 1,404 accounts, according to the project’s latest update. Qubic shared the details this week.
The network resumed processing ticks at 8:00 pm on Oct. 19, based on Qubic’s blockchain explorer. It moved past tick 85,371,949, where it had stopped on Sunday.
The network was halted on Sunday to stop further movement of the stolen funds. Attackers had exploited predictable wallet seeds created by vulnerable wallet software.
How the Vulnerability Worked
The flaw affected seeds generated with Qubic’s web wallet on certain Apple devices and browsers. On those systems, an insecure random-number generator could produce predictable seeds.
A wallet seed is the base code that controls a wallet. If someone can guess it, they can access the funds.
Qubic said on Sunday that it had fixed the seed-generation flaw in the latest version of its web wallet. That version is 4.26.4, released on Oct. 19.
Recovery Plan and Claims
Qubic said its validators, known as Computors, approved a recovery plan. The project also launched a claims platform for affected wallet holders.
Users can check their address on Qubic’s reclaim platform. If their wallet was affected, they can submit a claim there.
The deadline to submit claims is May 1, 2027. Qubic has not changed that date in its latest update.
Advice for Wallet Holders
Qubic urged users to treat older wallets as insecure. This applies to any wallet created with the web wallet before version 4.26.4.
The team said this is true even if funds were never touched. A wallet with a predictable seed could still be targeted later.
“Update to web wallet 4.26.4 or later, then create a new wallet,” the team said. It asked users to move their funds to the new wallet as soon as they can.
Qubic also said users should never use the old wallet again. The advice came in a post on Tuesday.
Binance News also reported the restart and the recovery claims process. Its report cited Cointelegraph and repeated the same timeline and deadline.
As of Oct. 21, Qubic’s claims platform is open, and affected users have until May 1, 2027 to file.
Be the first to comment