- Qubic halted its network after about $1.4 million was drained from more than 1,400 wallets.
- Qubic said 87.1% of the stolen funds remain frozen onchain and 12.9% sent to MEXC was also frozen.
The Qubic hack led the layer-1 blockchain to stop operations on Sunday after an attacker exploited weakly generated wallet seeds, according to the project. Qubic said the incident affected seeds created through any browser on an iPhone or iPad, Safari on a Mac until Oct. 18, 2026, or the Qubic iOS app before July 2025. The project said around $1.4 million was taken from more than 1,400 accounts, equal to 2.94 trillion Qubit. At the time of writing, the network remained paused at tick 85,371,949 while validators prepared to vote on recovery options for the frozen funds.
Qubic hack pauses the network
Qubic said in a statement on X that the network was halted at tick 85,371,949 and had not resumed at the time of writing. The project described the attack as a result of weak wallet seed generation, which allowed the attacker to drain funds from a large number of accounts.
According to Qubic, the losses affected more than 1,400 wallets and totaled approximately $1.4 million. The project said 2.94 trillion Qubit was stolen. It also said the vulnerability applied to wallet seeds generated in specific environments, including any browser on an iPhone or iPad, Safari on a Mac until Oct. 18, 2026, and the Qubic iOS app before July 2025.
Where the stolen funds went
Qubic said 87.1% of the drained funds never left the Qubic network and remain frozen onchain. That left a smaller portion of the stolen assets moving off the network after the attack.
The project said the remaining 12.9% was sent to crypto exchange MEXC. According to Qubic, MEXC froze the receiving account within about an hour. Qubic added that its core team is identifying affected wallets and preparing recovery options for a vote by the network’s Computors, which will decide what happens to the frozen funds.
Qubic hack fix and validator vote
Qubic said it has already fixed the seed-generation flaw in the latest version of its web wallet. A GitHub commit for version 4.26.4 shows the project replaced JavaScript’s Math.random() function with crypto.getRandomValues() when creating wallet seeds.
The project said Math.random() was not suitable for generating cryptographic secrets. Qubic also said it plans to publish a full technical report after a recovery plan is settled. At the time of writing, it had not announced when the network would restart, and it did not immediately respond to Cointelegraph’s request for comment.
Broader context around weak seed attacks
The Qubic hack follows other incidents linked to weak wallet seeds. In July, Coldcard disclosed that attackers had stolen funds from wallets whose seeds were weakened by a firmware bug.
The source also noted similar flaws in Trust Wallet’s browser extension and the Libbitcoin Explorer tool in 2023. Separately, AMLBot’s 2026 investigations report said hacks and exploits made up 19% of crypto crime cases in the third quarter but 40% of reported losses, based on 250 investigations opened since the start of the year.
Conclusion
The Qubic hack forced the network to pause after weakly generated wallet seeds were exploited to steal about $1.4 million from more than 1,400 accounts. Qubic said most of the stolen funds remain frozen onchain, while the portion sent to MEXC was also frozen. The project has updated its web wallet seed-generation method and said its Computors will vote on recovery options for the frozen assets. A full technical report is expected after that plan is settled, but Qubic has not said when the network will restart. At the time of writing, the chain remained halted at tick 85,371,949.
Disclaimer
The information provided in this article is for informational purposes only and should not be considered financial advice. The article does not offer sufficient information to make investment decisions, nor does it constitute an offer, recommendation, or solicitation to buy or sell any financial instrument. The content is opinion of the author and does not reflect any view or suggestion or any kind of advise from CryptoNewsBytes.com. The author declares he does not hold any of the above mentioned tokens or received any incentive from any company.
Featured image created by AI
