Skip to content
- Exploit begins: Attacker calls
deposit() on QBridge Ethereum contract with fake ETH deposits
- qXETH minted on BSC: The bridge relayer, fooled by the fake events, mints qXETH tokens for the attacker on BSC
- $80M drained: Attacker uses fake qXETH as collateral to borrow ~$80M in real assets from Qubit Finance lending pools
- Qubit team notified: Team becomes aware of the ongoing exploit
- Official Qubit tweet: Team publicly acknowledges the hack and asks hacker to contact them
- Team offers the hacker a $250,000 bug bounty to return the stolen $80M
- Major media outlets begin reporting:
- Bloomberg: “Hackers Seize $80 Million From Qubit in Latest DeFi Attack”
- CoinDesk: “DeFi Protocol Qubit Finance Exploited for $80M”
- CoinTelegraph, The Verge, ZDNet, The Register, and more
- Team states they have reported to police in two locations — no case numbers ever shared
- Team does not contact Binance security or other major exchanges/bridges to blacklist hacker wallet
- Aaron Yooshin Kim (CTO) deletes his LinkedIn profile
- Community notices and posts on Reddit about the deletion
- No explanation given for why a senior executive would erase their professional presence during a crisis
- Moderator @moleh systematically removes victims from the official Telegram group
- Community members who contact the team with information about the hacker receive no response
- Team does not establish any meaningful bounty for identifying the hacker
- Victims begin organizing independently
- Qubit Victims Alliance established
- Telegram group created: @qbtvictims
- Twitter/X account: @QV_Alliance
- Victims appeal to CZ and Binance for help — no meaningful response
- Arweave News publishes: “Inside The Struggle Of Qubit’s $90M Heist Victims With Mound Inc., A Binance-Endorsed Company”
- Original victims’ GitBook site last updated
- Victims’ group page updated with community links
- No funds returned to victims
- No public resolution announced by Mound Inc.
- Mound Inc. website (mound.finance) goes offline
- Team members largely disappear from public view
- The stolen $80M remains unaccounted for
- Victims continue to seek accountability