Qubic Blockchain Hack: $1.3 Million Stolen Due to iOS Vulnerability

On October 18, an unknown attacker carried out a large-scale attack on the Qubic blockchain, withdrawing approximately 2.94 trillion QUBIC tokens from 1,404 first-level addresses. At the current rate, the stolen assets are valued at around $1.3 million USD.

Experts determined that the vulnerability was not related to the blockchain's architecture itself. The problem lay in weak seed phrase generation when using Safari on Apple devices, including iPhones, iPads, and Macs, as well as in an older iOS application.

Due to low randomness quality, predicting private keys became possible for the hacker. This allowed unauthorized access to user funds stored in these wallets.

After discovering the incident, the Qubic network was urgently halted to prevent further losses. The project team managed to freeze 87.1% of all stolen funds directly on-chain.

The remaining 12.9% of assets, which were quickly transferred to the MEXC exchange, were also blocked. Official information about the incident was published on the project's account.