According to CoinMeta, blockchain security company ChainSecurity (SlowMist) has released a vulnerability analysis report for the Qubic wallet, pointing out that this wallet uses a non-cryptographically secure math.random () to generate account seeds, and writes a portion of the same random number sequence into the dejavu field of network data packets. This could potentially allow attackers to recover users' private keys through network observation. ChainSecurity discovered in local proof-of-concept tests (PoC) that by obtaining six consecutive dejavu values under specific conditions, it is possible to restore the 128-bit internal state of the pseudo-random number generator, thereby reconstructing the 55-character account seed, deriving the private key, and verifying its authenticity. The actual feasibility of this attack path still depends on factors such as network access rights, continuity of observation, and the order of random number calls; it is not yet confirmed whether attackers have used the same method before. Previously, on October 18th, Qubic reported that due to insufficient randomness in some wallet seeds, approximately 2.94 trillion QU were stolen from 1,404 wallets.