Layer-1 blockchain Qubic restarted its network and launched a recovery process following a security breach that drained approximately $1.4 million in QU tokens from 1,404 user accounts.
The exploit targeted a vulnerability in wallet seed generation. Qubic's blockchain explorer confirms the network resumed processing at 8:00 p.m. on Oct. 19, advancing past tick 85,371,949—the point where operations halted on Sunday to prevent further fund movement.
The breach stemmed from predictable wallet seeds in Qubic's web wallet software. The vulnerability affected seeds generated on certain Apple devices and browsers, where an insecure random-number generator created easily guessable seeds.
Qubic released a fix in web wallet version 4.26.4 on Oct. 19, directly addressing the security flaw. The project warned all users who created wallets with the web wallet before this version to consider those wallets insecure, regardless of whether they were directly targeted.
Affected users must immediately update to version 4.26.4 or later, then create a completely new wallet and transfer all funds to the new address. The old wallet should never be used again.
Qubic's network validators, known as Computors, approved a recovery plan for affected users. A dedicated claims platform allows impacted wallet holders to verify their addresses and initiate the reclaim process. The deadline to file claims is May 1, 2027.
