Qubic Halts Blockchain Following $1.4M Exploit

Layer-1 blockchain network Qubic halted operations after an attacker reportedly exploited weakly generated wallet seeds to drain approximately $1.4 million from more than 1,400 accounts, according to the project.

In a statement on X, Qubic announced that the network was halted at tick 85,371,949. The vulnerability affected wallet seeds generated using any browser on an iPhone or iPad, Safari on a Mac until October 18, 2026, or the Qubic iOS app before July 2025. This flaw led to the theft of 2.94 trillion Qubit (QU) tokens.

Frozen Funds and Exchange Action

According to Qubic, 87.1% of the drained funds never left the network and remain frozen in place. The remaining 12.9% was sent to the MEXC cryptocurrency exchange, whose team froze the receiving account within about an hour.

Vulnerability Fix and Recovery Plan

Qubic stated that it has fixed the seed-generation flaw in the latest version of its web wallet. A GitHub commit for version 4.26.4 shows that the project replaced JavaScript’s Math.random() function with the cryptographically secure crypto.getRandomValues() function.

The core team is currently identifying affected wallets and preparing recovery options for a vote by the network’s Computors, who will decide the fate of the frozen funds. The project has not yet announced when the network will restart.

Key facts

• Qubic halted operations at tick 85,371,949 following an exploit.
• Approximately $1.4 million was drained from over 1,400 accounts.
• 87.1% of stolen funds remain frozen onchain, while 12.9% were frozen at MEXC.
• The vulnerability stemmed from weak seed generation using Math.random().
• Network validators will vote on a recovery plan for the frozen funds.