{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random · updates",
  "home_page_url": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026",
  "feed_url": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026/feed.json",
  "description": "Between 23:42 UTC on Oct 17 and 01:26 UTC on Oct 18 2026 an attacker drained 1,404 Qubic wallets of about 2.94 trillion QU (roughly $1.3M to $1.4M). SlowMist traced it to wallet seeds generated with non-cryptographic Math.random, affecting seeds created in iPhone/iPad browsers, Mac Safari before Oct 18, and the iOS app before July 2025. Qubic halted the network; 87.1% of the funds are frozen on-chain and MEXC froze the rest. Wallet 4.26.4 switches to crypto.getRandomValues, but seeds already created stay weak.",
  "language": "en",
  "_pwn": {
    "slug": "qubic-wallets-weak-seed-drain-oct-2026",
    "severity": "high",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026#2026-10-20-db3dc8b8",
      "url": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026#2026-10-20-db3dc8b8",
      "title": "Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random: SlowMist publishes its analysis tracing the theft to weak randomness in seed generation.",
      "content_text": "Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random: SlowMist publishes its analysis tracing the theft to weak randomness in seed generation.\n\nSource: https://slowmist.medium.com/recovering-private-keys-in-just-6-connections-qubic-wallet-may-have-leaked-most-of-its-private-d87b520dccf6",
      "date_published": "2026-10-20T00:00:00.000Z",
      "external_url": "https://slowmist.medium.com/recovering-private-keys-in-just-6-connections-qubic-wallet-may-have-leaked-most-of-its-private-d87b520dccf6",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026#2026-10-18-b3e432a7",
      "url": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026#2026-10-18-b3e432a7",
      "title": "Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random: Qubic halts the network; wallet 4.26.4 replaces Math.random seed generation with crypto.getRandomValues.",
      "content_text": "Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random: Qubic halts the network; wallet 4.26.4 replaces Math.random seed generation with crypto.getRandomValues.\n\nSource: https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds",
      "date_published": "2026-10-18T00:00:00.000Z",
      "external_url": "https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026#2026-10-17-b5a394bc",
      "url": "https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026#2026-10-17-b5a394bc",
      "title": "Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random: An attacker drains 1,404 Qubic wallets between 23:42 UTC Oct 17 and 01:26 UTC Oct 18.",
      "content_text": "Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random: An attacker drains 1,404 Qubic wallets between 23:42 UTC Oct 17 and 01:26 UTC Oct 18.\n\nSource: https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds",
      "date_published": "2026-10-17T00:00:00.000Z",
      "external_url": "https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds",
      "tags": [
        "high"
      ]
    }
  ]
}