The Qubic network experienced a security incident resulting in the theft of 2.94 trillion QU tokens, valued at approximately $1.29 million. The attack, which occurred between 23:42 UTC on October 17 and 01:26 UTC on October 18, affected 1,404 wallets. Following the breach, Qubic validators halted the network at tick 85,371,949 to freeze transactions.
The project team identified the vulnerability as insufficient randomness in seed generation for wallets created on iOS, iPadOS, and Safari on macOS before October 18, 2026, as well as the Qubic iOS app before July 2025. Version 4.26.4 of the software was released to address the issue. Currently, 87.1% of the stolen funds remain on the network, while MEXC froze the remaining 12.9%.
Separately, the Cysic cross-chain bridge suffered an exploit on October 17 involving the unauthorized minting of 10 million CYS tokens on the BNB Smart Chain. The Cysic Foundation blacklisted the recipient address, securing 2.8 million CYS. These events contribute to a total of 11 recorded exploits in October, with DefiLlama reporting aggregate losses of $6.2 million for the month.
