🚨 1,404 wallets drained in 1 hour and 44 minutes, and the Qubic blockchain was shut down. The network wasn't hacked: the victims' “secret phrases” were just too easy to guess.
📌 The facts (Qubic, Cointelegraph, Crypto Briefing, TSN, Oct. 18–19, 2026)
• Attack from Oct. 17 at 23:42 to Oct. 18 at 01:26 (UTC): 1,404 wallets affected
• 2.94 trillion QU stolen, worth around 1.3 M$ according to press estimates
• 87.1% of the funds never left the network, frozen by the shutdown. The 12.9% sent to MEXC were frozen in about an hour
• Affected: seeds created in a browser on an iPhone/iPad or in Safari on a Mac before Oct. 18, 2026, or in the Qubic iOS app before July 2025
🧠 How it worked
Your seed (recovery phrase) is the key to your vault. It should be randomly selected from billions upon billions of possibilities. In this case, the web wallet used Math.random(), a “decorative” JavaScript random-number generator not designed for security. The result: overly predictable keys that the attacker was able to guess. Fix: version 4.26.4, with a proper cryptographic generator.
⚖️ The caveat
• The network was able to “freeze” the funds because its validators (the Computors) coordinated. Good news for the victims, but it also shows that a small group can halt the chain
• No refunds have been promised: a vote by the Computors will decide
• No restart date has been announced
👤 Abdoulaye, a zemidjan motorcycle taxi driver in Cotonou, created his wallet on an old, second-hand iPhone. The right move: check where your seed comes from, never enter it on a site linked to you in a message, and be wary of paid “recovery services.” Qubic says its team never sends private messages and never asks for your seed.
✅ Your security depends first and foremost on the quality of your key, not just the network.
Where did you create your seed: an app, a browser, or a hardware wallet? 👇
Not financial advice. DYOR.
Sources: Qubic (X), Cointelegraph, Crypto Briefing, TSN, The Defiant, MEXC.
#Sécurité #Seed #Crypto #Africa