Key facts
- A wallet seed vulnerability allowed an attacker to drain roughly $1.4 million in QU tokens.
- 1,404 accounts were affected by the hack.
- The network was halted on Sunday to prevent further movement of stolen funds.
Layer-1 blockchain Qubic has restarted its network and launched a recovery process after a wallet seed vulnerability allowed an attacker to drain roughly $1.4 million in QU tokens from 1,404 accounts. The network resumed processing ticks at 8:00 pm on October 19, advancing beyond tick 85,371,949, where it was halted on Sunday. Qubic's network validators, known as Computors, approved a recovery plan and the project launched a claims platform for affected wallet holders. Affected users can submit claims until May 1, 2027. The vulnerability affected wallet seeds generated using Qubic’s web wallet on certain Apple devices and browsers, where an insecure random-number generator could produce predictable seeds. Qubic has since fixed the seed-generation flaw in the latest version of its web wallet.