--- title: "Qubic Pauses Network After Weak Wallet Seeds Lead to $1.4M Exploit" description: "The layer-1 chain halted operations at tick 85,371,949 after an attacker drained 2.94 trillion QUBIC tokens across 1,400 compromised wallets." url: https://basisdesk.news/news/qubic-freezes-network-wallet-seed-exploit published: 2026-10-19T01:21:58.094Z modified: 2026-10-19T01:21:58.094Z section: Security & Hacks author: Basis Desk Newsroom (AI-generated, source-verified) sentiment: bearish tickers: [QU] tags: [qubic, exploits, wallet-security, cryptography, layer-1] license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice. --- # Qubic Pauses Network After Weak Wallet Seeds Lead to $1.4M Exploit The layer-1 chain halted operations at tick 85,371,949 after an attacker drained 2.94 trillion QUBIC tokens across 1,400 compromised wallets. ## At a glance - **What happened:** Qubic halted its layer-1 blockchain after an attacker leveraged a weak seed generation flaw to steal $1.4 million across 1,400 wallets. - **Why it matters:** The security incident frozen 87.1% of stolen assets on-chain, requiring a validator vote to resolve restitution while the network remains offline. - **Who is affected:** Users who generated Qubic seeds on Apple devices or Safari, the Qubic validator set, and MEXC account holders involved in asset tracing. - **What's next:** Computors will vote on fund recovery proposals before the network announces a restart date and publishes a post-mortem report. - **Primary source:** [Qubic freezes chain after attacker drains 1.4K wallets with weak seeds](https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound) — cointelegraph.com ## Key points - Qubic halted block production at tick 85,371,949 after 1,400 wallets lost 2.94 trillion QU, valued at $1.4 million. - The vulnerability stemmed from weak Math.random() seed generation on Apple devices and Safari browsers through Oct. 18, 2026. - Network validators will vote on remediation for the 87.1% of stolen assets currently frozen on-chain, while MEXC froze the rest. ## Editorial remark - **Context:** Cryptographic entropy failures have repeatedly affected non-custodial tools, including past issues with Libbitcoin Explorer and Trust Wallet extensions. Qubic's use of non-cryptographic pseudo-random functions in web scripts exposed user seed phrases to deterministic derivation. - **Impact:** More than 1,400 Apple-ecosystem Qubic wallet users suffered balance depletions. The protocol's $62.6 million ecosystem remains completely suspended while the governance layer organizes remediation. - **Watch:** The release of the core team's technical post-mortem, the Computor governance vote outcome regarding on-chain state rollbacks or fund redistribution, and the network restart tick announcement. Layer-1 blockchain network Qubic halted operations following an exploit that drained roughly $1.4 million across more than 1,400 accounts, according to project statements [1]. The network suspended processing at tick 85,371,949 and remains paused [1]. The incident resulted in the theft of 2.94 trillion $QU, the network's native asset, stemming from weakly generated wallet seeds across specific Apple operating systems and legacy application versions [1]. According to Qubic, the vulnerability impacted wallet seeds produced using any browser on an iPhone or iPad, Safari on macOS through Oct. 18, 2026, or the official Qubic iOS application prior to July 2025 [1]. Project representatives stated that 87.1% of the stolen capital never exited the Qubic blockchain and remains frozen on-chain, while the remaining 12.9% transferred to the centralized exchange MEXC [1]. The exchange froze the attacker's receiving account within approximately one hour of the transfer [1]. Weak key generation has presented ongoing systemic threats across the digital asset ecosystem, echoing self-custody incidents such as the [Coldcard firmware vulnerability](https://basisdesk.news/news/coldcard-firmware-exploit-116m-bitcoin-theft) that weakened seed creation mechanisms [1]. ## Remediation and Recovery Roadmap Qubic resolved the flaw in web wallet version 4.26.4, with a GitHub repository commit confirming the replacement of JavaScript's pseudo-random `Math.random()` function with the cryptographically secure `crypto.getRandomValues()` function [1]. Core developers are auditing affected accounts and drafting recovery proposals [1]. Network validators, known as Computors, will vote on governance measures to determine the disposition of the frozen assets [1]. The protocol operates an AI-oriented Useful Proof of Work consensus system, supporting fee-free smart contract execution [1]. Core contributors said a comprehensive technical post-mortem will be published after a restitution path is confirmed, though developers have not announced a formal timeline for network resumption [1]. ## FAQ **Which Qubic wallets were susceptible to the seed generation bug?** The flaw affected seeds generated via any browser on iOS or iPadOS, Safari on macOS up to Oct. 18, 2026, and the official Qubic iOS application before July 2025. **Are the drained Qubic funds permanently lost?** According to Qubic, 87.1% of the stolen assets remain frozen on-chain awaiting a validator vote, while the remaining 12.9% was frozen by exchange MEXC. ## Sources 1. [Qubic freezes chain after attacker drains 1.4K wallets with weak seeds](https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound) — cointelegraph.com, 2026-10-19 --- Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai