Breachpwn.watch

    Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random

    Teaser from the source

    Between 23:42 UTC on Oct 17 and 01:26 UTC on Oct 18 2026 an attacker drained 1,404 Qubic wallets of about 2.94 trillion QU (roughly $1.3M to $1.4M). SlowMist traced it to wallet seeds generated with non-cryptographic Math.random, affecting seeds created in iPhone/iPad browsers, Mac Safari before Oct 18, and the iOS app before July 2025. Qubic halted the network; 87.1% of the funds stayed frozen on-chain and MEXC froze the rest. The chain resumed on Oct 19 with affected funds in escrow, and owners can claim them until May 1 2027. Wallet 4.26.4 switches to crypto.getRandomValues, but seeds already created stay weak.

    This is the RSS-feed teaser. Read the full article at the original source.

    Read at pwn.watch

    Source: https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026

    ID