Qubic's network is running again. The project said on October 20, 2026, at 18:14 UTC that its Computor quorum approved a recovery and normal operation resumed, with funds that had been moved into protected escrow during the halt now moving back to verified owners. The first returns have gone out, though Qubic didn't say how much was in that initial batch.
The announcement also opened the claim platform, where affected users can submit ownership evidence tied to the 60-character identity that held the funds. But the portal's own introductory text still tells visitors the network is halted and funds are frozen — a line that now contradicts the restart notice sitting above it.
Why every old web wallet is now considered unsafe
Qubic's recovery guidance is blunt: any wallet created through the web wallet before version 4.26.4, released on October 19, should be treated as insecure even if nothing was taken from it. Users are told to update to 4.26.4 or later, generate a new wallet with a fresh seed, move funds over as soon as possible and stop using the old one.
Recovered funds have to go to a brand-new identity created in an updated wallet — not on an affected device or browser. Reusing the compromised seed is off the table. The weakness lies in the seeds themselves: they're weak enough that an attacker can generate the same valid signature as the legitimate owner, which is why a signature alone can't prove a claim belongs to the person filing it.
What the claim portal actually asks for
The claim has to come from the affected 60-character identity, and that identity must appear on the published affected-address list. Claimants sign a message with the wallet; the exact text is supplied by the site, and the process doesn't require pasting a seed into the portal.
Because a signature only links a claim to a proposed destination, core developers review separate evidence of ownership — material an attacker wouldn't have. The portal ranks an exchange withdrawal receipt showing a transfer to the affected source address as the strongest example, since the exchange's identity checks tie the withdrawal to its customer. An OTC deal confirmation referencing the address is also accepted. So is a pre-incident funding trail from a source the claimant can show they control, or a signed message from a different, unaffected address that funded the compromised one. A personal or sworn statement can support a submission, but it's labeled supporting material, not proof.
One strong item is usually enough, according to the portal, and several weaker items can work if they corroborate each other. Filing early doesn't defeat a legitimate later claim. The site only collects and verifies submissions; decisions about recovery and their application rest with the Computor quorum, and the claim form doesn't execute them.
Optional Didit check and the two review tracks
After filing, applicants can run an optional identity check through Didit. Verification improves the odds of fast approval and helps filter out impostors; identity documents stay with Didit, and Qubic receives a result rather than the documents. The check isn't mandatory.
Review splits uncontested claims from contested ones. A single, strongly evidenced claim with no dispute can take the fast route. Contested claims, weaker evidence and larger claims go to extended core-developer review. The portal doesn't publish a numerical threshold for what counts as a larger claim.
Approved claims are listed publicly with the address and amount for seven days before payout. Unresolved competing claims stay frozen in escrow. Payout needs both an ownership check and the dispute period, so signing a message doesn't trigger an immediate withdrawal.
The slower route for funds sent to MEXC
Funds drained but still on Qubic come back from the recovery escrow account. Funds sent to MEXC follow a separate, slower path through the exchange that depends on law-enforcement cooperation, and Qubic gave no completion date for that route. A weak identity whose funds weren't drained goes through release from an on-hold list after verification.
Owned tokens and shares are to be returned to the new identity once its claim is approved, and the application process covers those undrained assets alongside funds already taken.
The claim portal is live now, but the seven-day public listing window and the open-ended MEXC route mean the recovery will stretch well past the restart date. Affected users still have to move off any pre-4.26.4 wallet first.
