The security breach, which occurred between October 17 and 18, 2026, stemmed from a critical vulnerability in how the project’s wallet software generated recovery seeds. Insufficient randomness allowed the attacker to reconstruct private keys for wallets created on specific devices, including iPhones, iPads, and Mac computers using Safari. The core team identified that the flaw originated in the use of the insecure Math.random() function, which has since been replaced with cryptographically secure alternatives in version 4.26.4.
In section Cryptocurrency
Qubic Blockchain Suspended After $1.4 Million Wallet Exploit
The Qubic layer-1 blockchain remains offline following a coordinated attack that drained 2.94 trillion QU tokens from over 1,400 user wallets. By halting network operations at tick 85,371,949, developers successfully froze 87.1% of the stolen assets, while the remaining funds were intercepted at the MEXC exchange.

While the software patch addresses future seed generation, the status of existing wallets remains uncertain. The network's recovery depends on the "Computors"—the operators who manage the consensus process—who have yet to vote on a proposal to redistribute the frozen funds or reverse the unauthorized transactions. Exchanges including MEXC and XT have suspended deposit and withdrawal services for the token to prevent further movement of the stolen capital. Until the network operators approve a recovery roadmap, Qubic remains in a state of suspended animation, with no official timeline for a restart.
Comments (0)
No comments yet. Be the first!