diff --git a/.changeset/fix-qr-border-2677.md b/.changeset/fix-qr-border-2677.md
new file mode 100644
index 0000000000..5dd6338e96
--- /dev/null
+++ b/.changeset/fix-qr-border-2677.md
@@ -0,0 +1,5 @@
+---
+"@rainbow-me/rainbowkit": patch
+---
+
+Pin transitive `qr` to `0.4.2` to avoid the `border=0` crash introduced in [qr@0.6.0](https://github.com/paulmillr/qr/releases/tag/0.6.0). `0.4.2` is the version cuer was originally tested against and declares no `engines.node` constraint, preserving RainbowKit's existing Node support. Temporary workaround until [cuer#11](https://github.com/wevm/cuer/pull/11) is merged and released. Fixes #2677.
diff --git a/package.json b/package.json
index ebb6e4b088..df29558f05 100644
--- a/package.json
+++ b/package.json
@@ -102,7 +102,8 @@
       "esbuild"
     ],
     "overrides": {
-      "@remix-run/dev>esbuild": "0.25.5"
+      "@remix-run/dev>esbuild": "0.25.5",
+      "qr": "0.4.2"
     }
   },
   "engines": {
diff --git a/packages/rainbowkit/package.json b/packages/rainbowkit/package.json
index 3727913dac..a1773ea64e 100644
--- a/packages/rainbowkit/package.json
+++ b/packages/rainbowkit/package.json
@@ -72,6 +72,7 @@
     "@vanilla-extract/sprinkles": "1.6.5",
     "clsx": "2.1.1",
     "cuer": "0.0.3",
+    "qr": "0.4.2",
     "react-remove-scroll": "2.7.2",
     "ua-parser-js": "^2.0.9"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7ccdafe056..fd3bff6d91 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -11,6 +11,7 @@ overrides:
   react-dom: ^19.2.5
   elliptic: 6.6.1
   '@remix-run/dev>esbuild': 0.25.5
+  qr: 0.4.2
 
 pnpmfileChecksum: sha256-ROa84Qg+MkpzIsPst6Z16qq0lhN6UZ8989JrwPM2pZU=
 
@@ -469,6 +470,9 @@ importers:
       cuer:
         specifier: 0.0.3
         version: 0.0.3(react-dom@19.2.5(react@19.2.5))(react@19.2.5)(typescript@5.9.3)
+      qr:
+        specifier: 0.4.2
+        version: 0.4.2
       react-dom:
         specifier: ^19.2.5
         version: 19.2.5(react@19.2.5)