Qubic has restarted validator operations after approving a recovery plan following a wallet security exploit that drained approximately $1.4 million in QU tokens from 1,404 accounts. The network had suspended activity to limit further risk, but validators, known as “Computors,” have now approved the recovery process, and network ticks have resumed beyond the previous halt point.
The restart marks a shift from immediate incident containment toward asset recovery and remediation. Qubic’s blockchain explorer recorded the network stopping at tick 85,371,949 before activity resumed later that day. The interruption highlights the operational trade-off facing blockchain networks during security incidents: temporarily halting transaction processing can disrupt normal activity, but it may also help limit further exposure while recovery measures are prepared.
The exploit originated from a weakness in Qubic’s web wallet that generated predictable wallet seeds under certain conditions involving Apple devices and browsers. According to the project, an insecure random-number generator failed to provide sufficient randomness, potentially allowing an attacker to derive access to wallets created with vulnerable software.
Wallet seeds are fundamental to cryptocurrency security because they underpin access to the associated funds. If a seed can be predicted, an attacker may be able to compromise a wallet without exploiting the blockchain’s underlying consensus mechanism. In this case, the reported vulnerability points to a weakness in wallet generation rather than evidence of a failure in Qubic’s core consensus protocol.
The reported loss of approximately $1.4 million across 1,404 accounts establishes the scale of the incident. However, the affected wallet population may require additional precautions beyond checking whether funds have already been stolen. Qubic has warned users that wallets created through its web wallet before version 4.26.4 should be treated as insecure, even if their balances remain untouched.
The project released version 4.26.4 on Oct. 19, stating that the seed-generation flaw had been fixed. Its recommended response is to update the wallet software, generate a new wallet, transfer any remaining funds to the new address and permanently stop using the potentially compromised wallet. Updating the software alone does not eliminate the risk associated with a seed that was generated under vulnerable conditions.
Qubic has also launched a dedicated claims platform at for affected users to check their addresses and submit recovery requests. The deadline for claims is May 1, 2027, giving users an extended period to determine their eligibility and complete the process.
The claims mechanism is a central component of the recovery effort because restoring network operations does not, by itself, establish that affected users have recovered their assets. The eventual outcome will depend on how the approved recovery plan is implemented and how claims are assessed across the impacted accounts. The project’s current update does not establish that all reported losses have been reimbursed.
For Qubic, the incident presents two related challenges: restoring confidence in wallet security and demonstrating that the recovery process can address the reported losses. The validator-approved plan provides a framework for moving forward, but its effectiveness will be measured by the consistency of claims decisions and the extent to which eligible users recover their funds.
The next key developments will be progress in executing the recovery plan, the handling of submitted claims and confirmation that affected users are migrating to wallets generated with the patched software. The May 1, 2027, deadline provides a defined window for recovery requests, while the warning against reusing vulnerable wallets remains an immediate security priority.
