GoPlusSecurity: Qubic Weak seed vulnerability leads to the theft of 1,404 wallets, resulting in a loss of approximately $1.3 million
2026-10-19 19:54:47
According to CoinMeta, as reported by GoPlusSecurity, the Qubic platform was attacked with a weak seed vulnerability between October 17th and 18th, resulting in the theft of 1,404 Apple platform wallets, causing a loss of approximately $1.3 million. The attackers utilized the official web wallet on the Apple platform (webkit / javascriptcore) for the attack, generating seeds using math.random (), and offline enumerated all 2^32 possible pseudo-random seeds. They matched these with 1,404 wallets and stole 2,939,606,531,944 Qubic (about $1.3 million). Qubic subsequently initiated a protective shutdown, and 87.1% of the stolen funds have been frozen on the blockchain, while the remaining 12.9% were transferred to MEXC; the receiving accounts have also been frozen. Qubic released version v4.26.4 and switched to crypto.getrandomvalues. Affected users should update their accounts promptly. The common feature of the 1,404 affected wallet addresses is that their seeds were generated by the official Qubic client in a low-entropy environment.
Bullish 0
Bearish 0
Source:X
This content is for market information only and does not constitute investment advice.