Today’s Field Note

Two onchain failures today worth logging. Qubic froze its entire network after an attacker drained roughly 1,400 wallets by exploiting weak, predictable seed generation, with about $1.3M in QU moved. Qubic claims 87.1% of the funds are still immobilized onchain and MEXC froze the rest, but a chain halt plus a validator “recovery vote” is a confession that the key material itself was the vulnerability, not some clever contract exploit. Separately, Cysic suspended its bridge after an attacker minted 10 million CYS out of nothing and laundered $727K to Ethereum through Mayan, deBridge, and SWFT’s Bridgers. Both are the same lesson: if the mint authority or the seed is sloppy, the audited parts of your stack are irrelevant.

Today’s Move

  • If you hold QU or used a Qubic wallet, treat your seed as compromised. Generate a fresh wallet with proper entropy on a clean device and move funds once the chain reopens.
  • Do not interact with the Cysic bridge or CYS token until a full post-mortem names the mint bug and a fix is deployed and audited.
  • Watch the Cysic attacker’s Ethereum address and the Mayan, deBridge, and SWFT Bridgers routes for follow-on laundering if you run monitoring.
  • Builders: audit your seed and key-generation path, not just contracts. Any custom or low-entropy RNG is the first thing to rip out.
  • If you held CYS pre-exploit, assume supply is now diluted by 10M minted tokens and price any exit accordingly.

Resources

  • https://thedefiant.io/news/hacks/qubic-halts-network-after-1-3-million-wallet-drain
  • https://www.theblock.co/news/defi/2026-10-18-cysic-suspends-bridge-after-attacker-mints-tokens-and-moves-727000-to-ethereum-418863
  • Incident trackers (reference standard): Rekt leaderboard · SlowMist Hacked

More: Issues · Field Notes · RTFM

Daily field notes, weekly Issues. Follow @ItsAlreadyPrice or subscribe via RSS.