Qubic’s recovery rules require ownership checks even for unstolen funds in vulnerable wallets

Qubic’s recovery rules can leave the owner of a vulnerable wallet needing approval to regain access even when its funds were never stolen. The blockchain network’s October 21 core update adds further frozen-address changes to a design that reaches beyond coins already taken by an attacker. The incident involved weakly generated wallet secrets that an attacker could reproduce. Both the attacker and the original holder can then produce a valid signature. Qubic’s reclaim rules therefore require evidence beyond that signature before a claim is approved. The October 19 v1.308.2 release specifies two distinct escrow operations: moving drained QU from attacker identities and moving QU and assets from vulnerable wallets. It also specifies freezing vulnerable identities, canceling their open QX orders and making tick 85,371,950 empty.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to CryptoSlate.