Insufficient randomness in some Qubic wallet seed generation allowed brute-force of recovery seeds draining about $1.4 million across 1404 wallets.
What to do: Update to fixed wallet version 4.26.4 and regenerate seeds on secure devices.
· 18 days ago · Qubic wallet users · hacked.slowmist.io
Sourceshacked.slowmist.io
On X
The Qubic drain wasn't a hack of the chain, it was a hack of randomness. A flaw in the wallet software let recovery seeds be generated with weak entropy (Math.random() instead of a cryptographically secure RNG). That m
Why this score
Re-scored from the verified-lane dataset (Grok severity capped by the rubric)