Qubic Freezes 87.1% of Tokens Stolen in Wallet Exploit

Qubic immobilized 87.1% of the funds taken in a wallet exploit by halting its network, but a recovery decision remains pending for the 1,404 affected wallets.

The attacker drained about 2.94 trillion QU, units of Qubic (QUBIC), between 7:42 and 9:26 p.m. ET on Oct. 17 (23:42 UTC Oct. 17 to 01:26 UTC Oct. 18). Qubic halted the network at tick 85,371,949, freezing the stolen funds that remained on-chain. The other 12.9% reached MEXC, a crypto exchange that suspended QUBIC deposits and withdrawals at Qubic’s request.

Qubic changed its wallet code to use crypto.getRandomValues() in place of Math.random() when creating new wallet seeds. A seed is the secret data used to generate a wallet’s keys. The change addresses new wallet creation; it does not return funds already taken from affected wallets.

The network halt immobilized tokens still on Qubic, but it did not restore them to their owners. A decision on recovery rests with Qubic’s Computor quorum. No date has been set for a full network restart.