Qubic Halts Network Following Massive Wallet Exploit
TREE NEWS reports: Qubic, a cryptocurrency project, has paused its network after an attacker exploited insufficient randomness in wallet seed generation to drain approximately 2.94 trillion QU tokens from 1,404 wallets. The incident occurred between 23:42 UTC on October 17 and 01:26 UTC on October 18. Qubic emphasized that the flaw lies in the seed generation mechanism, not the Qubic protocol itself.
The affected seeds include those created on any browser on iPhone or iPad before October 18, 2026; those created in Mac Safari before the same date; and those created via the Qubic iOS App before July 2025. The network was halted at tick 85,371,949. As of now, 87.1% of the stolen funds remain on the Qubic network and have been frozen, while the remaining 12.9% was transferred to MEXC, where the receiving accounts have also been frozen. Qubic stated that the seed generation issue has been fixed in version 4.26.4, and further actions will be decided by the Computor quorum according to network rules. A full technical report will be released once a fund recovery plan is determined.
Analysis: Seed Generation Weakness Exposes Broader Wallet Security Risks
The Qubic exploit highlights a critical but often overlooked vulnerability in cryptocurrency wallets: the randomness of seed phrases. If a wallet’s seed is generated with insufficient entropy, it becomes predictable, allowing attackers to systematically derive private keys and drain funds. This is not the first time such a flaw has been exploited; similar issues have plagued other projects, underscoring the need for rigorous cryptographic standards in wallet development.
Qubic’s decision to pause the network demonstrates a centralized response to a security breach, which may raise questions about decentralization. However, the fact that 87.1% of stolen funds remain frozen on-chain suggests that the network’s design allows for some level of intervention. The involvement of MEXC in freezing the remaining funds also shows the importance of exchange cooperation in mitigating damage.
For the DeFi and crypto industry, this incident serves as a reminder that wallet security is only as strong as its weakest link. Projects must prioritize audits of seed generation libraries and ensure they use cryptographically secure random number generators. Users, especially those on mobile devices, should be cautious about wallet apps and consider using hardware wallets for large holdings.
Forward-Looking: Recovery and Lessons Learned
The coming weeks will be crucial for Qubic as it works to recover funds and restore network operations. The Computor quorum will play a key role in deciding the path forward, which may include a rollback or compensation plan. The full technical report will be closely watched by the community and security researchers.
This incident also adds to the growing list of crypto exploits in 2023, reinforcing the need for stronger security practices across the industry. As wallets become more user-friendly, the underlying cryptographic foundations must not be compromised. For Qubic, the challenge is not only to recover funds but also to rebuild trust and demonstrate that the protocol can handle such crises transparently.
