Layer-1 blockchain Qubic halted its network after an attacker exploited weakly generated wallet seeds to drain about $1.4 million from more than 1,400 accounts, according to the project. The vulnerability affected wallets created with any browser on iPhone or iPad, Safari on Mac until Oct. 18, 2026, or the Qubic iOS app before July 2025, with 2.94 trillion QU stolen. Qubic says 87.1% of the funds remain frozen on its network, while 12.9% was sent to MEXC, whose team froze the receiving account within about an hour. The team has fixed the flaw in web wallet version 4.26.4, is identifying affected wallets, and will let Computors vote on a recovery plan; no restart date has been announced. The article links the incident to a series of weak-seed attacks in recent years.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on Cointelegraph ↗
Keywords
Open a keyword to see other news on the same topic.
Related news
- Richard Heart caught 'off-guard,' QDay gets even closer: Hodler's Digest
HEX founder Richard Schueler (Richard Heart) was detained in Istanbul on October 14, and the HEX market cap fell from $561 million to $315 million this week. Police seized $7.15 million in cash, along with firearms and ammunition, in an early-morning raid in Istanbul's Beşiktaş district and 15 related addresses, and impounded luxury vehicles registered to his wife. Ledger unveiled Atom, an $849 device expected to ship in summer 2027, days after confirming that wallets sold through an Asian reseller contained malicious implants, an incident tied to more than $90 million stolen. Starknet opened a vote to transform from an Ethereum L2 into a post-quantum L1, with more than 99% of votes cast so far in favor, but its token lost almost 50% of its value this week.
- Crypto audits give investors false sense of security as Q3 hacks cost $1.18 billion, Hacken says
Hacken says hackers stole $1.18 billion from crypto projects in the third quarter across 107 incidents, up 55% from the previous quarter. About $906.8 million of that came from compromised suppliers or developer tools, uninstalled security fixes, or components excluded from the latest security review. Hacken warns that audit badges can give investors a false sense of security, since reviews often omit wallets, signing systems and third-party software that attackers target. The biggest incident was the September attack on Bitget, which lost at least $352 million after hackers exploited a vulnerability in a third-party security product.
- Cysic crypto bridge halted after unauthorized mint of 10M CYS
Cysic suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain on Saturday. Preliminary findings point to unauthorized access to a database supporting the bridge. The company blacklisted the recipient address on the token contract, where about 2.8 million CYS remained with transfers restricted. Cysic says the incident was limited to bridge message processing and minting, did not affect the mainnet, and did not result in the theft or unauthorized transfer of existing CYS or other assets in user wallets. The company added that the mint size does not establish the final dollar loss, has hired a security firm, and plans to publish a follow-up report.
- eMemory/PUFsecurity Showcases OCP S.A.F.E.-Approved PUFrt at OCP Global Summit, Strengthening AI Data Center Security with Caliptra
PUFsecurity, a subsidiary of eMemory Technology, was featured at Microsoft's Caliptra Workshop on Oct. 12, the opening day of the 2026 OCP Global Summit, which drew nearly 400 attendees. Its PUFrt received OCP S.A.F.E. Scope 3 approval after an independent assessment of its resistance to physical attacks such as fault injection and side-channel attacks, and is now listed on the OCP Marketplace. PUFrt provides the physical security foundation for Caliptra, an open-source hardware Root-of-Trust architecture, from key generation to chip mass-production testing. It has already been integrated into Caliptra products from ASPEED and security systems from several memory makers and networking chip vendors. The company says the milestone advances hardware security for cloud and AI infrastructure.
- Zoom Adds 'Proof of Human' Badges to Show You're Not a Deepfake
World, the project backed by Sam Altman, has rolled out biometric verification badges for Zoom enterprise users to combat AI deepfake impersonation and fraud. Its World ID for Zoom is now available in the Zoom Marketplace and compares an image captured by its iris-scanning Orb, a live selfie and the participant's video feed before displaying a Human Badge to other meeting participants. The feature had been in limited beta testing with VanEck Funds since April and is now available globally to Zoom enterprise customers. Bain Capital and Pantera Capital were named as initial design partners. The rollout follows incidents such as a 2024 case in which an Arup employee transferred about $25 million after scammers impersonated executives during a video conference, and a February incident in which suspected North Korea-linked hackers used fabricated video feeds in fake Zoom meetings.
- Burger King Japan exposes 11.18 million customer records
Burger King Japan said an intruder accessed its member management server without authorization from October 2 to October 7, 2026, before the breach was detected. An investigation completed on October 13 found that 11.18 million customer records were at risk of leaking, including full names in Kanji and Kana, dates of birth, gender, email addresses, phone numbers, prefecture of residence and app order-history tags. The company said no credit card or bank payment information was stored in the system, and its access logs showed no evidence that account passwords were stolen. Burger King has blocked the unauthorized access, reported the incident to Japan's Personal Information Protection Commission (PPC) and police, and warned customers about scam calls, texts and emails impersonating the brand.
Related markets
Latest news
- JPMorgan's JPM Coin, representing dollar deposits, is coming to Ethereum: Bloomberg
JPMorgan will make JPM Coin, a token representing its dollar deposits, available to institutional clients on Ethereum, according to Bloomberg. The bank says Ethereum's liquidity makes it attractive to crypto companies seeking blockchain payments and to financial firms settling trades or backing tokenized assets. The move extends JPMorgan's blockchain work beyond Base and its private Kinexys network, which processes more than $7 billion daily. The bank did not say when the token will go live on Ethereum. Meanwhile, JPMorgan is among US banks planning a shared tokenized deposit network, but it was not on Swift's list of 17 banks preparing live transactions on its blockchain ledger in July.
- Cerrado Gold Reports 21% Year-Over-Year Increase in Q3 2026 Production Results at Minera Don Nicolas
Cerrado Gold reported Q3 2026 production of 16,685 GEO at the Minera Don Nicolas (MDN) mine in Santa Cruz Province, Argentina, up 21% from 13,832 GEO in Q3 2025. Year-to-date output reached 44,942 GEO, up 23% from 36,432 GEO in the comparable 2025 period. Heap leach output held steady at 9,649 GEO, while CIL output rose to 7,036 GEO as higher-grade Calandrias material, generally above 2.5 g/t gold, was routed to the Martinetas mill. Laboratory tests on selected material showed gold recoveries of up to 95%, versus about 60% expected from heap leaching, and the company now expects full-year 2026 production at the upper end of its 50,000 to 60,000 GEO guidance while targeting a new PEA by late Q1 2027.
- Is Visa Stock Still a Buy After Gaining 14% This Year?
Visa shares hit an all-time high of $401, up about 12% over the past two weeks from $359 at the end of September and up 14% year to date. Key catalysts include approval from the People's Bank of China to set up a bankcard clearing institution in China and the move of Visa Direct's stablecoin to commercial deployment on Oct. 15. Baird and BMO Capital both raised their price targets. Visa reports fiscal fourth-quarter earnings on Oct. 27 and has raised its dividend every year since 2009, last year by 14% to $0.67 per share. The author still considers the stock a buy ahead of earnings, citing a forward P/E of 24.
- Five things to watch in markets in the week ahead
Markets start the week with AI stocks under pressure after hotter-than-expected September inflation raised expectations of higher US rates and fed worries about debt-funded AI spending. Last week the Philadelphia semiconductor index fell 11.41% and the Nasdaq Composite lost 4.48%, with CoreWeave shedding about a quarter of its value and Oracle down 9.31%. Earnings are in focus, with SpaceX and Netflix reporting on Tuesday and Meta and Tesla on Wednesday after the close. Netflix reportedly plans to cut around 6% of its workforce, roughly 1,000 roles, its biggest reduction since 2022. SpaceX has also agreed to buy spectrum licenses from Grain Management for about $8 billion, a move into the wireless market.
- Crypto vault deposits top $10 billion as lending risks draw regulatory scrutiny
Deposits into crypto lending vaults have risen from $4 billion at the start of last year to more than $10 billion, according to the Financial Times. Each vault is run by a 'curator' who selects lending strategies through smart contracts on DeFi platforms, sets risk limits and collects fees, with typical returns of 3% to 10% and riskier strategies reaching 20% or more. Risks include illiquid or hard-to-sell collateral, automatic liquidations, hacks and coding errors, while investors may focus on headline yields. Fintechs, digital asset treasury firms and hedge funds are among the main depositors, and Bitcoin lender Two Prime launched a vault on Pareto targeting 1.5% to 2% yields, with a minimum deposit of 5 WBTC and about $10 million of its own capital absorbing initial losses. U.S. and European regulators are examining whether existing rules should apply, and the SEC has questioned vaults that hold securities.
- This Table Explains Exactly Why Warren Buffett and Berkshire Hathaway Have Struggled to Find Stocks to Buy and Where You Can Find Great Value Stocks Right Now
Greg Abel ended Berkshire Hathaway's 14-quarter streak last quarter by buying more stocks for the marketable equity portfolio than he sold. Warren Buffett had previously trimmed large positions, leaving Abel with a record $369 billion in cash. The article attributes the difficulty in finding opportunities to valuations: large-cap stocks trade at a premium of 10% to 19% to their historical levels, and value stocks are the most overvalued relative to their historic range. In contrast, small- and mid-cap value stocks trade below historical valuations, a segment that large institutions often overlook while individual investors can invest more freely. The article mentions two value ETFs, AVUV and DFAT, which both add profitability screens to avoid value traps.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.