Qubic Freezes Blockchain After Hacker Drains 1,400 Wallets
An attacker exploited weak seed phrases to drain over 1,400 Qubic wallets. Most stolen funds are still onchain as validators weigh a recovery vote.
If you've ever used a lazy password and hoped for the best, the Qubic network just showed you exactly how that story ends. The crypto project has halted its blockchain after a bad actor managed to drain more than 1,400 wallets by targeting weak seed phrases — essentially the master keys that protect a crypto wallet. It's a stark reminder that in decentralized finance, your security is only as strong as your weakest passphrase.
The good news, if you can call it that, is that the attacker didn't get clean away with the loot. Qubic says roughly 87.1% of the stolen funds are still sitting onchain, meaning they haven't been fully cashed out or laundered. On top of that, whatever portion made it to crypto exchange MEXC has reportedly been frozen, giving the project a fighting chance at clawing some value back before it disappears into the ether — pun intended.
Read more Should Tesla and SpaceX Merge? Analysts Weigh the Idea →
Qubic's network validators are now preparing to vote on a formal recovery plan, which is the blockchain equivalent of calling an emergency board meeting. Because Qubic operates with a validator-driven governance model, any remediation — whether that means reversing transactions, redistributing recovered funds, or something else entirely — has to go through a community consensus process. That's both a feature and a frustration when time is of the essence.
Attacks built around weak or predictable seed phrases aren't new to crypto, but they remain stubbornly effective. Security researchers have long warned that algorithmically generated seeds with low entropy — basically seeds that aren't random enough — can be brute-forced by determined attackers with the right tools. This incident underscores why wallet hygiene matters just as much as which blockchain you're building on.
The situation is still developing, and the outcome of the validator vote will likely determine how much, if any, of the drained funds get returned to affected users. Continue reading at Cointelegraph.
