Safari

Based

Qubic

<h2 id="b-tldr-b">TLDR:</h2>
<ul>
 <li style="font-weight: 400">Qubic says an attacker drained 1,404 wallets of about 2.94 trillion QU in under two hours.</li>
 <li style="font-weight: 400">The flaw came from weak seed generation, not the Qubic protocol, and version 4.26.4 fixes it.&nbsp;</li>
 <li style="font-weight: 400">Computors halted the network at tick 85,371,949, and 87.1% of the stolen funds remain frozen.</li>
 <li style="font-weight: 400">MEXC froze the account holding the other 12.9%, and exchanges paused QUBIC deposits and withdrawals.</li>
</ul>
Qubic attack losses reached approximately 2.94 trillion QU after an attacker drained 1,404 wallets, the Layer 1 network reported. The activity ran from 23:42 UTC on October 17 to 01:26 UTC on October 18. 
Qubic traced the breach to wallet seeds created with insufficient randomness. The network protocol was not the source. 
Roughly 87.1% of the stolen funds remain frozen, and the rest moved to MEXC. Exchanges have since suspended QUBIC deposits and withdrawals.
<h2 id="b-how-the-qubic-attack-happened-b">How the Qubic Attack Happened</h2>
Qubic detailed the incident in a <a href="https://blockonomi.com/core-lightning-security-update-urges-immediate-node-upgrade/" rel="noopener noreferrer nofollow">security update</a> on X on October 18. The post drew about 85,900 views. 
It described the event as an exploit of weakly generated seeds. Based on the stated times, the attack window lasted about one hour and 44 minutes.
<div class="embed-x">
 <blockquote class="twitter-tweet">
 Security incident update.
 Between 23:42 UTC on 17 October and 01:26 UTC on 18 October, an attacker drained 1,404 Qubic wallets, totalling around 2.94 trillion QU.
 Here is what happened, what has been done, and what comes next. <a href="https://t.co/7aPJ26lEeZ" rel="noopener noreferrer nofollow">pic.twitter.com/7aPJ26lEeZ</a>
 — Qubic (@_Qubic_) <a href="https://x.com/_Qubic_/status/2111796725677715474?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">October 18, 2026</a>
 </blockquote>
</div>
Qubic said the attacker used this weakness to reach the <a href="https://parameter.io/coldcard-hardware-wallets-compromised-ai-assisted-attack-nets-112m-in-bitcoin/" rel="noopener noreferrer nofollow">affected wallets.</a> The seeds were weaker than they should be. In a follow-up post, Qubic then listed the seeds at risk.
Seeds created on an iPhone or iPad in any browser before October 18, 2026 are affected. The same applies to Mac seeds made in Safari before that date. 
Seeds from the Qubic iOS app created before July 2025 are also included. Qubic said it fixed the cause in version 4.26.4. No new weak seeds can be created.
<h2 id="b-network-halt-and-frozen-funds-b">Network Halt and Frozen Funds</h2>
Computors coordinated a protective halt at tick 85,371,949. As a result, no transactions are processing on the network. 
Qubic stated that the drained funds cannot be moved or sold during this period. This pause remains active as the matter is resolved.
Most of the stolen QU never left the network. Qubic put that share at 87.1%, and it remains frozen in place. The other 12.9% went to <a href="https://moneycheck.com/xrphai-goes-live-on-mexc-as-xrp-healthcare-starts-public-market-access-worldwide/" rel="noopener noreferrer nofollow">MEXC.</a> Qubic confirmed this split in its update thread.
The MEXC team froze the receiving account within about an hour. Qubic said other exchanges were notified. Those exchanges have suspended QUBIC deposits and withdrawals. Qubic described the funds as contained after the Qubic attack.
<h2 id="b-recovery-steps-and-user-safety-b">Recovery Steps and User Safety</h2>
Any resolution is a decision for the Computor quorum under network rules. The Core team is identifying every affected identity. 
It is also preparing options for the quorum to consider. Qubic has not announced a final outcome for the Qubic attack yet.
A community poll is open on Discord. It gives the Computors a clear view before they decide. Meanwhile,<a href="https://coincentral.com/qubic-halts-blockchain-after-1-4-million-wallet-hack/" rel="noopener noreferrer nofollow"> Qubic</a> urged affected users to file reports with police or cybercrime authorities in their country. 
Reports should list the wallet ID, the amount lost, and the explorer.qubic.org transaction link. Qubic said formal reports help exchanges keep funds frozen.
Qubic also issued a scam warning. Nobody from the project will message first, ask for a seed, or offer paid recovery services. 
Users should report such messages. A full technical report will follow once recovery is settled. Qubic will keep users updated on X.
&nbsp;
The post <a href="https://blockonomi.com/qubic-attack-drains-1404-wallets-as-87-1-of-stolen-qu-stays-frozen-after-network-halt/" rel="noopener noreferrer nofollow">Qubic Attack Drains 1,404 Wallets as 87.1% of Stolen QU Stays Frozen After Network Halt</a> appeared first on <a href="https://blockonomi.com" rel="noopener noreferrer nofollow">Blockonomi</a>.

Qubic Attack Drains 1,404 Wallets as 87.1% of Stolen QU Stays Frozen After Network Halt

Table of Contents

Blockonomi

Other articles published on Oct 19, 2026

Join our free newsletter for daily crypto updates!