SlowMist discovers Qubic wallet vulnerability exposing private keys

SlowMist identified a vulnerability in the Qubic (QU) wallet that may allow the theft of private keys. The wallet employs a weak random number generator for both account creation and network communications. An attacker could potentially capture six consecutive random values from the network, enabling them to reverse-engineer the random number used for account creation and recover the private key. The feasibility of such an attack depends on various factors, including the network environment. Previously, approximately 1300000 dollars worth of QU was stolen on October 17 due to a wallet seed-generation vulnerability, with the circulation of most stolen tokens subsequently blocked.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.