Qubic network halted after weak wallet seeds allow theft of 2.94 trillion QU

The direct market consequences are limited: QUBIC is a small-cap token, the dollar value of the loss is modest, and selling pressure has been contained to the token itself rather than spilling into the broader crypto market. The more pressing near-term issue is liquidity, as the network is paused and exchanges have halted deposits and withdrawals, leaving token holders unable to move their assets until the chain resumes. The Computor vote on restitution is likely to have a greater impact on the token's recovery than the theft itself, because a clean, transparent outcome could restore confidence while a prolonged freeze would increase uncertainty. The incident may also prompt renewed scrutiny of key-generation practices at other wallet providers.

---

Qubic's blockchain functioned correctly, but its wallet keys did not. Freezing the network saved most of the stolen tokens, yet it also highlights how much control a small validator group holds over user funds.

Summary:

• An attacker drained 1,404 Qubic wallets of approximately 2.94 trillion QU, worth about $1.3 million, in under two hours on October 17-18 UTC
• The vulnerability came from weak randomness in wallet seed generation, not from the Qubic protocol, and has been fixed in version 4.26.4
• Wallets created through browsers on iPhone and iPad, Safari on Mac, and older versions of the Qubic iOS app were affected
• The network halted at tick 85,371,949, with roughly 87% of the stolen funds frozen on-chain and the remainder frozen at MEXC
• Exchanges suspended QUBIC deposits and withdrawals, and the token dropped more than 10%
• Qubic's Computor validators will decide on recovery and any compensation

Layer 1 blockchain Qubic has paused its network after an attacker took advantage of weak randomness in wallet seed creation to drain 1,404 wallets of approximately 2.94 trillion QU tokens, valued at around $1.3 million, over a span of less than two hours late on October 17 and early October 18 UTC, according to a project post.

Qubic emphasized that the flaw existed in the tool used to generate wallet seeds rather than in the blockchain protocol itself. The affected code used a random number function not suitable for cryptographic secrets, meaning seeds that appeared long and secure were in practice predictable enough for an attacker to reconstruct a smaller set of likely candidates and check them for funded wallets. Wallets created via browsers on iPhone and iPad, through Safari on Mac up to October 18, and with older versions of the Qubic iOS app were vulnerable. The project says the issue has been resolved in version 4.26.4.

Validators stopped the network at tick 85,371,949. About 87% of the stolen tokens remain on Qubic and are locked by the halt, while the remaining roughly 13% was sent to the MEXC exchange, which froze the receiving account. Other exchanges have suspended QUBIC deposits and withdrawals. The token fell more than 10% following the attack, and the project's market capitalization is only around $60 million, keeping the incident small in dollar terms.

---

Key terms explained

Wallet seed
A sequence of characters, often presented as a list of words, used to generate and restore a crypto wallet's private keys. Anyone with the seed controls the funds, so it must be impossible to guess.

Randomness in seed generation
Seeds must come from a genuinely unpredictable source. Some common programming functions only appear random and follow patterns, allowing an attacker to narrow down possible seeds and locate funded wallets. That is what happened at Qubic.

Layer 1 blockchain
A base blockchain network with its own rules and native token, such as Bitcoin or Ethereum, as opposed to an application or network built on top of another chain.

Computors
Qubic's term for validators: a fixed set of operators who process transactions and vote on network decisions, including whether to halt the chain and what happens to frozen funds.

Tick
Qubic's unit of network time, analogous to a block number on other blockchains. Halting at a specific tick marks the exact point after which no transactions were processed.

---

The incident offers two takeaways for crypto users. First, a secure blockchain does not guarantee secure funds: control depends on private keys, and keys are only as strong as the software that generates them. Similar weak-randomness vulnerabilities have affected other wallet tools in recent years. Second, a network that can pause itself and freeze balances involves a trade-off. The halt saved most of the stolen funds, but it also demonstrates that a relatively small group of validators, called Computors on Qubic, can stop transactions and decide the fate of user assets.

That group now holds the critical decision. Readers should monitor when and how the network restarts, whether the Computor vote provides restitution for victims, whether MEXC returns the frozen portion, and what the promised technical report reveals. A clean recovery would bolster confidence in Qubic's governance, while a prolonged halt or a contested vote would raise more difficult questions about how decentralised the network truly is.