TLDR Qubic restarted its layer-1 blockchain after an attacker drained about $1.4 million in QU tokens from 1,404 wallets. The network’s Computors approved a recovery plan, and Qubic says some
Qubic has restarted its layer-1 blockchain and started returning funds to users after a wallet flaw led to a hack worth about $1.4 million.
The attacker drained roughly 2.94 trillion QU tokens from 1,404 accounts. Affected users now have until May 1, 2027, to file recovery claims.
In an October 20 post on X, Qubic said its Computors had approved a recovery plan. Computors are the network validators that make consensus decisions.
The Qubic network is live again.
The Computor quorum approved the recovery, the reclaim platform is open, and the first funds have already gone back to verified owners.
Here's what's new and what you need to do. pic.twitter.com/2pIM0IfiFB
— Qubic (@_Qubic_) October 20, 2026
The project said initial funds have already reached verified owners. It did not say how much was paid or how many claims were approved.
The attack took place between late October 17 and early October 18. Qubic halted the blockchain on Sunday, October 18, at tick 85,371,949 to stop the stolen tokens from moving.
According to Qubic’s blockchain explorer, as cited by Cointelegraph, the network resumed processing at 8:00 pm on October 19. Crypto.news said it could not independently confirm the exact restart time.
Qubic estimated that 87.1% of the stolen tokens were still on the network when it stopped. The other 12.9% reached the crypto exchange MEXC, which froze the receiving account within about an hour.
During the shutdown, the affected funds were moved into protected escrow. This allowed the team to repay verified owners.
The flaw involved how wallet seeds were created, not the blockchain’s consensus system. The web wallet used an insecure random number generator on some devices, which made some recovery phrases predictable.
Affected seeds included those created in browsers on iPhones and iPads, in Safari on Mac computers and in older versions of Qubic’s iOS app.
Qubic fixed the flaw in web wallet version 4.26.4, released on October 19. However, updating the app does not replace a recovery phrase made with the old software.
“If you created your wallet with the Qubic web wallet before version 4.26.4 (released 19 October), treat it as insecure, even if your funds were never touched,” the team said on Tuesday.
“Update to web wallet 4.26.4 or later, then create a new wallet,” the team added. “Move your funds to the new wallet as soon as you can, and never use the old one again.”
On Qubic’s reclaim platform, users can check an address, submit a claim and track its status. Claimants need their compromised identity, a new destination identity, a signed message and proof of ownership.
The platform says a wallet signature alone is not enough. An attacker who can rebuild a weak seed could create the same valid signature.
Supporting proof may include exchange withdrawal receipts, private transaction records or a funding trail from another wallet the claimant controls. Identity checks are optional.
Qubic warned users about scammers offering help through private messages. The team said it will never ask for recovery phrases or message users directly about claims.
Similar seed flaws have hit other wallets, including a Coldcard firmware issue disclosed in July 2026 and the 2023 Libbitcoin Explorer bug.
Qubic said it plans to publish a full technical report on the incident. Claims remain open until May 1, 2027.
The post Qubic Opens Crypto Hack Recovery Claims Until May 2027 appeared first on Blockonomi.
