The Qubic blockchain resumed operations on October 20 after a security breach that affected 1,404 wallets. The network had been halted at tick 85,371,949 on October 19 to mitigate the impact of the attack, which occurred between October 17 and 18. During the downtime, the compromised funds were moved to a secure escrow account.
The vulnerability stemmed from insufficient randomness in seed phrase generation, affecting browsers on iPhones, iPads, Safari on Mac, and older iOS app versions. The team released web wallet version 4.26.4 on October 19 to address the flaw. Users are advised to treat all wallets created before this version as insecure and to migrate assets to new wallets.
The attacker stole approximately 2.94 trillion QU. According to Qubic, 87.1% of the stolen tokens remained within the network, while 12.9% were traced to the MEXC exchange, which subsequently blocked the account. The project has launched a recovery platform where verified owners can submit claims until May 1, 2027.
Claimants must provide evidence of ownership, such as transaction histories or records of OTC deals. Applications with clear proof are processed on an expedited basis, while others undergo additional verification. The team has already begun returning assets to verified users, though specific payout volumes and recipient counts remain undisclosed.
