Qubic Network Halts Operations Following Major Security Breach
On October 18th, the Qubic network was forced to suspend all transactions after a significant wallet exploit resulted in the theft of approximately $1.3 million worth of QU tokens. The incident impacted over 1,400 individual wallets.
Exploiting a Critical Wallet Vulnerability
The attacker successfully exploited a flaw in the wallet seed generation process. Specifically, the 55-bit seed generation mechanism exhibited insufficient randomness, allowing the prediction and reconstruction of viable seeds to gain unauthorized access.
Timeline and Network Response
The fraudulent transfers occurred between 23:42 UTC on Saturday and 01:26 UTC on Sunday. Network validators, known as Computors, responded by halting transactions at tick 85,371,949 to contain the breach.
Affected Wallets and Patch Status
Wallets generated through the following environments were primarily affected:
- Wallets created via iPhone/iPad browsers
- Wallets generated using Mac Safari
- Wallets from older versions of the iOS application
The underlying vulnerability has been addressed in software version 4.26.4. Users are advised to update to the latest version to secure their assets.
Fund Recovery and Market Impact
Post-incident tracing revealed the following:
- 87.1% of the stolen QU remains on-chain and has been frozen
- 12.9% was sent to MEXC exchange, where the receiving accounts are now frozen
- Bitget exchange concurrently suspended QU deposits and withdrawals
The market reacted negatively to the news, with the QU token's price falling more than 10% by Sunday morning EST. The Computors will arbitrate on potential user compensation.