Qubic has suspended its blockchain after an attacker drained 1,404 wallets containing approximately 2.94 trillion QU tokens, valued at around $1.3 million, by exploiting predictable wallet se
Qubic has suspended its blockchain after an attacker drained 1,404 wallets containing approximately 2.94 trillion QU tokens, valued at around $1.3 million, by exploiting predictable wallet seeds generated through vulnerable software.
The theft occurred between 23:42 UTC on October 17 and 01:26 UTC on October 18, 2026. Qubic’s Computors coordinated an emergency network halt at tick 85,371,949, stopping further transactions while the development team investigated the affected wallets.
Approximately 87.1% of the stolen tokens remained on the halted network, while the remaining 12.9% reached cryptocurrency exchange MEXC, which froze the receiving account. The funds have been immobilized, but their eventual recovery and distribution remain unresolved.
The attacker exploited insufficient randomness in wallet recovery-seed generation, making the resulting private keys vulnerable to prediction.
The affected environments include any browser running on an iPhone or iPad before October 18, 2026, Safari on macOS before the same date, and the Qubic iOS application before July 2025.
The vulnerability existed in wallet seed generation rather than in Qubic’s underlying consensus or transaction-validation rules. Addresses created using predictable seeds remained exposed even when their owners had not recently interacted with malicious applications or signed suspicious transactions.
A similar weakness appeared in the Ill Bloom wallet flaw, which exposed cryptocurrency addresses through insufficient randomness during recovery phrase creation. A separate Coldcard vulnerability also affected hardware wallets that generated insufficiently secure Bitcoin seeds.
Qubic’s affected-wallet records identify 2,939,606,531,944 QU transferred into seven collecting addresses during the incident. Wallets created through the vulnerable environments remain potentially compromised even when they were not included in the identified thefts.
Qubic released wallet version 4.26.4 on October 18, introducing a correction to its seed-generation process.
The security patch replaces JavaScript’s Math.random() function with crypto.getRandomValues(), providing cryptographically secure randomness for newly generated wallet seeds.
The updated implementation also rejects selected random byte values to eliminate statistical bias when converting random data into the 55-character seeds used by Qubic.
The correction protects newly generated seeds but does not secure wallets created with the vulnerable method. Affected users need fresh wallets with securely generated seeds and must transfer any remaining assets once network transactions resume and the team provides migration instructions.
Qubic has warned users against unsolicited recovery offers and requests for wallet seeds or private keys.
Qubic’s emergency response prevented most stolen funds from moving beyond its network, while MEXC immobilized the exchange-held portion. The Computor cluster will determine the next recovery actions through the network’s governance procedures.
Shortly before the Qubic incident, Cysic’s bridge was exploited, allowing an attacker to mint 10 million unauthorized CYS tokens and transfer approximately $727,000 in proceeds to Ethereum before the bridge was suspended.
Qubic is identifying additional potentially exposed addresses and assessing how to protect remaining balances before restoring normal operations. Its QEARN staking system was reported unaffected, although network-level transaction processing remains suspended.
Exchanges have also restricted QU transfers while the incident remains unresolved, preventing additional deposits and withdrawals through affected platforms.
Qubic plans to publish a comprehensive technical report after its recovery approach is finalized. The Computor quorum has not announced a final compensation decision or a confirmed date for restarting the network.
The post Qubic Halts Network After $1.3 Million Theft Drains 1,404 Wallets appeared first on Crypto Adventure.
