3 articles
Qubic traced the drain to wallet seeds generated with JavaScript's Math.random(), so the patched client protects only wallets created after the fix. The network stoppage is the only thing holding the 87 percent of the stolen QU that never left the chain.
The exchange's security notice declined to name an attack vector, and hours later its chief executive said the attacker spoofed transaction data through a compromised backend system, ruling out private key theft. Withdrawals remain suspended, and the loss is close to 76 percent of the User Protection Fund Bitget says covers it.
On-chain evidence suggests RaveDAO insiders moved millions of RAVE tokens to exchanges before and during a vertical price surge that added $5.7 billion in market capitalisation in nine days, then erased it all in 48 hours.
