Qubic restarts chain, opens claims after $1.4M weak-seed hack

Qubic restarted its network on October 19 and announced the open claims platform on October 20 after predictable wallet seeds let an attacker drain roughly $1.4 million in QU tokens from 1,404 accounts.

The project announced on X that its validator quorum, the Computors, approved the recovery plan, the reclaim platform is open, and the first funds have already gone back to verified owners.

The Qubic network is live again.

The Computor quorum approved the recovery, the reclaim platform is open, and the first funds have already gone back to verified owners.

Here's what's new and what you need to do. pic.twitter.com/2pIM0IfiFB

- Qubic (@_Qubic_) October 20, 2026

The root cause sits in the wallet software, not in the chain itself. Qubic said the flaw affected seed phrases generated with its Qubic web wallet on certain Apple devices and browsers: the insecure random-number generator used there could produce predictable seeds, which in turn left the corresponding wallets open to unauthorized token movement. A wallet seed is the secret from which all of a wallet's keys are derived, so anyone who guesses it effectively owns the account. An attack that guesses seeds does not touch Qubic's consensus rules, which is why the project rejects describing this as a hack of the protocol.

What the network did about it

Qubic halted the mainnet on Sunday, October 18, to stop further movement of stolen funds. Its blockchain explorer shows processing resumed at 8:00 pm on October 19, advancing past tick 85,371,949, the point where the network had paused. Qubic released web wallet version 4.26.4 the same day, fixing the seed-generation flaw.

Affected users submit a claim through weak-seed-reclaim.qubic.org, with a deadline of May 1, 2027. Recovery rules reported October 22 require ownership checks even on unstolen funds held in vulnerable wallets, a measure some users may contest.

What wallet holders should do now

Qubic warned that any wallet created with the Qubic web wallet before version 4.26.4 should be treated as insecure, even if no funds ever left it. The team urged users to update to 4.26.4 or later, create a new wallet, move their funds across as soon as possible, and never use the old wallet again.

Previous coverage of the mainnet halt reported 87.1% of stolen funds frozen within hours of the exploit. The attack itself echoes a recurring pattern in crypto security, where audits of a protocol offer no protection when the weakness sits in client-side software.

The post Qubic restarts chain, opens claims after $1.4M weak-seed hack appeared first on Techreport.