Qubic Halts Network After Weak Wallet Seeds Lead to $1.4 Million Theft

Qubic paused its blockchain on Sunday at tick 85,371,949 after an attacker drained roughly $1.4 million from more than 1,400 accounts. About 2.94 trillion QU tokens were taken, and the network is still frozen while the team works on a response.

Which Wallet Seeds Were Vulnerable

The weakness affected seeds created in any browser on an iPhone or iPad, in Safari on a Mac before October 18, 2026, or in the Qubic iOS app before July 2025. According to the project, 87.1% of the stolen funds never left the network and remain frozen in place. The other 12.9% went to MEXC, where the exchange froze the receiving account within about an hour.

Qubic Wallet Fix and Recovery Vote

The cause was a coding flaw. Version 4.26.4 of the web wallet replaces Math.random(), which is unsuitable for cryptographic secrets, with crypto.getRandomValues() for seed creation. The core team is now identifying affected wallets and preparing recovery options. Computors, the network’s validators, will vote on what happens to the frozen funds. A full technical report is promised once a plan is settled, but no restart date has been given.

Weak Seed Attacks in Crypto Security

This is not an isolated case. Coldcard disclosed seed related thefts in July caused by a firmware bug, and Trust Wallet’s browser extension and the Libbitcoin Explorer tool had similar flaws in 2023. Qubic is a fee free layer 1 chain built on Useful Proof of Work, which uses mining energy to train artificial intelligence, and its token has a market value near $62.6 million. In the third quarter, hacks and exploits made up 19% of crypto crime cases but 40% of reported losses, based on 250 investigations opened this year.