Skip to content
Prices
  • BTC$82,740▲ 1.15%
  • ETH$2,441▲ 1.75%
  • BNB$743.29▲ 1.87%
  • XRP$1.33▲ 2.42%
  • SOL$105.99▲ 1.19%
  • TRX$0.3307▼ 0.32%
  • HYPE$80.90▲ 2.34%
  • DOGE$0.0815▲ 2.62%
  • LINK$12.32▲ 2.40%
  • ADA$0.2233▲ 2.57%
  • AVAX$9.65▲ 0.79%

Qubic restarts chain, opens claims after $1.4M wallet drain

Qubic is back online after weak web-wallet seeds let an attacker drain 1,404 accounts. Validators backed a recovery plan; claims run until 1 May 2027.

· · 2 min read

Share
A MacBook Pro laptop with a web browser open on its screen (illustrative photo)
Image: 223系新快速 / Wikimedia Commons, CC BY-SA 4.0
On this page

Qubic has restarted its blockchain and opened a claims process for victims of last weekend's wallet drain, in which an attacker took roughly $1.4 million in QU tokens from 1,404 accounts, Cointelegraph reports, citing the project's latest update. We covered the original incident when Qubic halted its mainnet.

What changed this week

  • Network back online: Qubic's explorer shows the chain processing ticks again from 8 p.m. on 19 October, moving past tick 85,371,949, where it had been stopped.
  • Recovery plan approved: Qubic's validators, called Computors, signed off on a recovery plan.
  • Claims open: affected holders can check their address and submit a claim on Qubic's reclaim platform until 1 May 2027.

Qubic incident timeline

  1. 17–18 Oct

    Wallets drained

    An attacker reproduces predictable seeds and empties 1,404 accounts.

  2. 18 Oct

    Chain halted

    The network is frozen at tick 85,371,949 to stop stolen funds moving.

  3. 19 Oct

    Fix and restart

    Web wallet 4.26.4 fixes seed generation; ticks resume that evening.

  4. 20 Oct

    Recovery plan

    Computors approve the plan and a claims platform opens.

  5. 1 May 2027

    Claims deadline

    Last day for affected holders to submit a claim.

Why the wallets were weak

Qubic says the code of the network itself was not broken. The problem was seed generation: on certain Apple devices and browsers, its web wallet relied on an insecure random-number generator that could produce predictable seeds. Anyone able to recreate a seed controls the wallet, which is why randomness matters so much. Our new explainer on what a seed phrase is walks through how seeds are created and protected.

What affected users should do

Qubic's advice is blunt: if you created your wallet with the Qubic web wallet before version 4.26.4 (released 19 October), treat it as insecure even if nothing was taken. Update to 4.26.4 or later, create a brand-new wallet, move the funds and never reuse the old one. For larger balances, a dedicated device helps; see what a hardware wallet is.

Still open: how much each claimant will recover and how the frozen funds, most of which never left the Qubic network, will be returned.

This article is for information only and is not financial advice. Crypto assets are volatile; do your own research. Read our disclaimer

Share

More from Security

View all →

Read next