<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random · updates</title>
  <link>https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026</link>
  <description>Between 23:42 UTC on Oct 17 and 01:26 UTC on Oct 18 2026 an attacker drained 1,404 Qubic wallets of about 2.94 trillion QU (roughly $1.3M to $1.4M). SlowMist traced it to wallet seeds generated with non-cryptographic Math.random, affecting seeds created in iPhone/iPad browsers, Mac Safari before Oct 18, and the iOS app before July 2025. Qubic halted the network; 87.1% of the funds are frozen on-chain and MEXC froze the rest. Wallet 4.26.4 switches to crypto.getRandomValues, but seeds already created stay weak.</description>
  <language>en</language>
  <lastBuildDate>Tue, 20 Oct 2026 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random: SlowMist publishes its analysis tracing the theft to weak randomness in seed generation.</title>
    <link>https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026#2026-10-20-db3dc8b8</guid>
    <pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://slowmist.medium.com/recovering-private-keys-in-just-6-connections-qubic-wallet-may-have-leaked-most-of-its-private-d87b520dccf6&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random: Qubic halts the network; wallet 4.26.4 replaces Math.random seed generation with crypto.getRandomValues.</title>
    <link>https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026#2026-10-18-b3e432a7</guid>
    <pubDate>Sun, 18 Oct 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Qubic: 1,404 wallets drained (about $1.3M) because seeds were generated with Math.random: An attacker drains 1,404 Qubic wallets between 23:42 UTC Oct 17 and 01:26 UTC Oct 18.</title>
    <link>https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/qubic-wallets-weak-seed-drain-oct-2026#2026-10-17-b5a394bc</guid>
    <pubDate>Sat, 17 Oct 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
