Skip to content
$BTC$82,286+0.8%$ETH$2,416+0.3%$SOL$104.87+1.1%$XRP$1.31+0.8%$TON$1.780.0%MCap$2.73T+1.7%BTC.D60.3%Fear&Greed59 GreedGas0.06 gwei·1 sat/vBNews mood7% bullish
Basis Desk

New from Basis Desk: free Telegram proxies for places where Telegram is blocked or slowed down.Connect in one tap →

Security & Hacks · 1 min read

Qubic Pauses Network After Weak Wallet Seeds Lead to $1.4M Exploit

The layer-1 chain halted operations at tick 85,371,949 after an attacker drained 2.94 trillion QUBIC tokens across 1,400 compromised wallets.

Editorial oversight: Julian Mercer, Chief Editor
Bearish

At a glance

What happened
Qubic halted its layer-1 blockchain after an attacker leveraged a weak seed generation flaw to steal $1.4 million across 1,400 wallets.
Why it matters
The security incident frozen 87.1% of stolen assets on-chain, requiring a validator vote to resolve restitution while the network remains offline.
Who is affected
Users who generated Qubic seeds on Apple devices or Safari, the Qubic validator set, and MEXC account holders involved in asset tracing.
What's next
Computors will vote on fund recovery proposals before the network announces a restart date and publishes a post-mortem report.
Primary source
cointelegraph.com: Qubic freezes chain after attacker drains 1.4K wallets with weak seeds

Key points

  • Qubic halted block production at tick 85,371,949 after 1,400 wallets lost 2.94 trillion QU, valued at $1.4 million.
  • The vulnerability stemmed from weak Math.random() seed generation on Apple devices and Safari browsers through Oct. 18, 2026.
  • Network validators will vote on remediation for the 87.1% of stolen assets currently frozen on-chain, while MEXC froze the rest.

Layer-1 blockchain network Qubic halted operations following an exploit that drained roughly $1.4 million across more than 1,400 accounts, according to project statements 1. The network suspended processing at tick 85,371,949 and remains paused 1. The incident resulted in the theft of 2.94 trillion $QU, the network's native asset, stemming from weakly generated wallet seeds across specific Apple operating systems and legacy application versions 1.

According to Qubic, the vulnerability impacted wallet seeds produced using any browser on an iPhone or iPad, Safari on macOS through Oct. 18, 2026, or the official Qubic iOS application prior to July 2025 1. Project representatives stated that 87.1% of the stolen capital never exited the Qubic blockchain and remains frozen on-chain, while the remaining 12.9% transferred to the centralized exchange MEXC 1. The exchange froze the attacker's receiving account within approximately one hour of the transfer 1. Weak key generation has presented ongoing systemic threats across the digital asset ecosystem, echoing self-custody incidents such as the Coldcard firmware vulnerability that weakened seed creation mechanisms 1.

Remediation and Recovery Roadmap

Qubic resolved the flaw in web wallet version 4.26.4, with a GitHub repository commit confirming the replacement of JavaScript's pseudo-random Math.random() function with the cryptographically secure crypto.getRandomValues() function 1. Core developers are auditing affected accounts and drafting recovery proposals 1. Network validators, known as Computors, will vote on governance measures to determine the disposition of the frozen assets 1.

The protocol operates an AI-oriented Useful Proof of Work consensus system, supporting fee-free smart contract execution 1. Core contributors said a comprehensive technical post-mortem will be published after a restitution path is confirmed, though developers have not announced a formal timeline for network resumption 1.

Questions this story raises

Which Qubic wallets were susceptible to the seed generation bug?
The flaw affected seeds generated via any browser on iOS or iPadOS, Safari on macOS up to Oct. 18, 2026, and the official Qubic iOS application before July 2025.
Are the drained Qubic funds permanently lost?
According to Qubic, 87.1% of the stolen assets remain frozen on-chain awaiting a validator vote, while the remaining 12.9% was frozen by exchange MEXC.

Sources

  1. [1] Qubic freezes chain after attacker drains 1.4K wallets with weak seeds — cointelegraph.com, October 19, 2026

Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.

Community read
How do you read this story for the assets involved? One vote a day, anonymous.
Be the first to vote
Share X Telegram Bluesky Markdown Web Story

The Daily Brief, in your inbox at 07:00 ET

Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.

Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.