Qubic Suspends Blockchain Operations Following $1.4M Theft From Over 1,400 Wallets Due to Seed Vulnerability
The Qubic blockchain was brought to a standstill following reports that inadequate wallet seed generation enabled a malicious actor to siphon $1.4 million from over 1,400 user accounts.
The layer-1 blockchain platform Qubic brought its network to a complete halt on Sunday following reports that a malicious actor took advantage of poorly generated wallet seeds to siphon roughly $1.4 million from over 1,400 user accounts, the project disclosed.
According to an announcement posted on X, Qubic confirmed the network was suspended at tick 85,371,949, where it continues to remain frozen as of this publication. The project explained that the security flaw impacted wallet seeds created through any web browser on an iPhone or iPad, Safari browsers on Mac computers up until Oct. 18, 2026, or through the Qubic iOS application prior to July 2025, resulting in the theft of 2.94 trillion Qubit (QU) tokens.
87.1% of the drained funds never left the Qubic network and remain frozen in place. The remaining 12.9% was sent to MEXC, whose team froze the receiving account within about an hour.
This incident involving Qubic represents another case in a growing pattern of security breaches connected to inadequate wallet seed generation. During July, Coldcard made public that malicious actors had successfully stolen cryptocurrency from wallets that were compromised by a firmware defect that weakened their seeds. Comparable security vulnerabilities were discovered in Trust Wallet's browser extension along with the Libbitcoin Explorer tool during 2023.
According to Qubic's statement, the team has successfully patched the seed-generation vulnerability in their web wallet's most recent release.
Documentation from a GitHub commit for version 4.26.4 reveals that Qubic has removed JavaScript's Math.random() function, which lacks the security requirements for generating cryptographic secrets, and implemented the cryptographically secure crypto.getRandomValues() function for wallet seed creation instead.
The project's core development team stated they are currently working to identify all wallets that were compromised and are developing recovery solutions that will be submitted for approval by the network's Computors, who will make the final determination regarding the fate of the locked funds. The development team committed to releasing a comprehensive technical analysis once a recovery strategy has been finalized. No timeline has been provided for when normal network operations will resume.
Cointelegraph reached out to Qubic for additional comment but had not received a response at press time.
The Qubic platform operates as a layer-1 blockchain network that enables both transactions and smart contracts to function without requiring users to pay fees. The network operates on Useful Proof of Work (UPoW) – a consensus algorithm that redirects the computational power used in mining operations toward training artificial intelligence systems. Based on data from CoinGecko, Qubic's native token maintained a market capitalization of approximately $62.6 million when this article was published.
During the third quarter of the year, hacks and security exploits represented 19% of all cryptocurrency crime incidents but were responsible for 40% of the total reported financial losses, based on AMLBot's 2026 investigations report, which analyzed 250 separate investigations the firm initiated from the beginning of the year.