On the night of October 18, 2026, the Qubic network shut down its own operations. An attacker had drained 1,404 wallets before that, roughly 2.94 trillion QU worth about $1.3 million. Accordi
On the night of October 18, 2026, the Qubic network shut down its own operations. An attacker had drained 1,404 wallets before that, roughly 2.94 trillion QU worth about $1.3 million. According to the project, the cause lies outside the Qubic protocol: some wallets generated their recovery phrase in a way that made it predictable. If you hold QU and ever created your wallet in a browser on an iPhone or iPad, or in Safari on a Mac, you have to assume your seed is on the published list.
The case does not end with Qubic. A seed that a random number generator produces inside a browser depends on the quality of that generator. That applies to every wallet created in a browser, whatever the coin.
The window is narrow and well documented. After the project's disclosure, reported in the same terms by Crypto Briefing and Bitcoin.com News, the outflows began on October 17 at 23:42 UTC and ended on October 18 at 01:26 UTC. That is one hour and 44 minutes, in which 1,404 accounts were emptied.
Both reports put the amount at roughly 2.94 trillion QU. QU is a token with a very large number of units and a correspondingly low unit price, which is why the count sounds larger than the value behind it: about $1.3 million at the time of the theft.
The validators then intervened. They halted the blockchain at tick 85,371,949. A tick is Qubic's unit of count for one processing step of the network, comparable to a block on Bitcoin. A halted network processes nothing at all, further outflows included.
A seed is the character string from which a wallet derives all of its private keys. On Qubic it is a sequence of 55 lower-case letters. Whoever knows it has full access to the balance, with no password and no device.
The developers state that the blockchain's own program code was not attacked. The vulnerable point lay one step earlier: the generation of those 55 characters. If software does not draw the characters at genuine random but follows a pattern that can be reproduced, an attacker can work through the sequence. That is what happened, according to the Qubic announcement that the on-chain service Lookonchain passed on during the night.
A seed of 55 characters has so many possible combinations on paper that no computer on earth could work through them. That protection rests entirely on each of the 55 positions being truly unpredictable. If the number of actually possible starting values shrinks to a few million, the 55 characters are no more than a facade. The attacker does not calculate one seed, he calculates every seed the software could ever have produced, then checks which of them hold a balance.
Qubic has named the affected routes. On that list, the following count as vulnerable:
The line therefore runs along the Apple platform. That is no coincidence: on the iPhone and iPad every browser has to use Safari's rendering engine, even when the label on the front says Chrome or Firefox. A flaw in that single engine hits every browser on the device at once.
If you set up your Qubic wallet on Windows, Android or Linux instead, or used the desktop application, this list does not put you on the risk side. That is not a guarantee: the list comes from the project itself and may grow as the post-mortem continues.
Entropy is the measure of how much genuine unpredictability sits inside a number. An operating system collects that unpredictability from many sources, among them the intervals between keystrokes, sensor noise, or a dedicated unit inside the processor.
A web page inside a browser reaches those sources only indirectly. It asks an interface for random numbers and gets whatever the browser hands over. If that interface is poorly supplied with entropy, shortly after the device starts for instance, the result is weaker than the length of the string suggests. The user sees none of it. Their seed looks just as jumbled as any other.
That gives a rule of thumb which reaches beyond this case: the fewer layers between the source of randomness and your seed, the better. A device that does nothing but hold keys has the shortest path here. Which devices are available in Germany and what they cost is set out in the hardware wallet comparison.
Most of the stolen QU is going nowhere: 87.1 percent sits in the halted network, the rest on a frozen exchange account.
This is where the case turns unusual. The attacker never got most of the stolen amount out of the Qubic network at all. On the matching figures in both reports, 87.1 percent of the QU remains on the blockchain, where it can neither be moved nor sold while the network is halted.
The remaining 12.9 percent reached the exchange MEXC. The inflow was noticed there: the venue says it froze the receiving account within an hour because it suspected a connection to the attack. At that speed this is not a given, and it stopped that share from draining into the market as well.
A halted network protects the haul from being sold on, but it also pins down everyone else. If you hold QU and are not affected at all, you cannot reach your balance either until the restart. That is the price of the measure, and the project paid it deliberately.
QEARN, the network's staking function, is not affected according to the developers. Nothing has been decided yet about compensating the victims. Responsibility lies with the Computor cluster, the operators who carry the network and vote on its direction. So far there is no commitment, only the statement that the decision will be taken there.
While the network stands still, two trading venues have acted. MEXC froze the account where the haul landed. The exchange Bitget suspended deposits and withdrawals for QUBIC for as long as the situation remains unresolved. Both steps prevent stolen tokens from being passed on through regulated trading.
On the software side, the Crypto Briefing report names client version 4.26.4 as the release that fixes the weakness in seed generation. The developers also say they moved further endangered balances to safety ahead of the attacker. A new program version, however, only repairs the generation of future seeds. A seed that was already created weakly stays weak, whatever version runs on top of it.
For a sense of scale: QU was quoted at $0.0000004268 on Sunday evening, with a market value of around $61.4 million and rank 385 in the overall market. Against the previous day that is a loss of 13.6 percent. cryptoticker.io collected these figures itself on October 18, 2026.
The stolen amount therefore corresponds to roughly two percent of the entire market value. For a project of this size that is noticeable; for the crypto market as a whole it is a small number. If you want to follow the price from here, you will find it in the Qubic price prediction.
Three things make this incident interesting beyond the project. First, it hit the software in front of the blockchain while the blockchain itself remained untouched. Second, the weakness persisted unnoticed for years, without any user being able to spot it. Third, it struck the route that feels most convenient of all: the wallet in the browser, set up in seconds, with nothing to install.
A similar lesson sat behind the case in which an OpenAI agent used known seed phrases to reach 362 wallets. There, too, no blockchain was broken, only an assumption about where the keys came from. The debate about quantum risk for Bitcoin addresses turns on the same question at its core: how good is the procedure that produced your key?
A new sequence of words only helps if the source it came from is sound.
In practice what counts is who generates the key for you. There are three routes, and they differ at exactly that point.
A device of that kind draws its randomness from a dedicated unit and never passes the seed on to a computer. The browser does not appear in the process at all. In exchange you pay a three-figure sum and carry responsibility for the backup yourself.
This is where the Qubic case sits. An application on a phone or a computer can use a good generator or a weak one, and from the outside that cannot be seen. What matters is whether the software takes the operating system's generator and whether its code is open. Both can be read up before setup, and neither can be changed afterwards.
If you buy through an exchange and leave the coins there, the provider holds the keys. A weak seed on your side then cannot arise in the first place. In exchange everything hangs on the provider, and with a provider that holds no licence it hangs on nothing. That such providers exist was shown by BaFin with several warnings this October.
If you transfer your coins to a new wallet because of a questionable seed, you are not selling them. A transfer between two addresses that both belong to you is not a disposal, and it does not restart the one-year holding period under German tax law.
The only thing that matters is that you carry the acquisition data over. Your tax software or portfolio tracker has to recognise both addresses as yours, otherwise the incoming amount at the new address shows up as a deposit without an acquisition, and the gain is calculated wrongly later. Record the move in your files with the date, both addresses and the transaction ID before you delete the old wallet.
The project calls on victims to file a report. That sounds like a formality, and yet it is the point at which the frozen funds may later become movable again: an exchange that freezes an account on suspicion needs an official basis at some stage in order to release the balance or return it.
In Germany you file the report at any police station, and in most federal states online through the Internetwache as well. Take what you have: your Qubic address, the attacker's address, the time and size of the outflow, and proof that the wallet belongs to you. Compensation does not follow from it. Qubic has promised none, and the Computor cluster has yet to decide.
The numbers are small, the lesson is not. If your recovery phrase came into being inside a browser window, you do not know how much randomness actually sits in it. Three steps take you out of that uncertainty:
The Qubic network is not running at the moment. When it will start again and what happens to the frozen QU then is open. Until it does, the most useful part of this night remains the question anyone can answer for their own wallets: where did the randomness come from?
(As of October 18, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)
