Qubic has confirmed that attackers drained 1,404 wallets and stole around 2.94 trillion QU during a security incident between October 17 and 18. The network attributed the breach to weak wallet seed generation rather than a flaw in the Qubic protocol itself.
Some wallet seeds were created with insufficient randomness, making them vulnerable to compromise. The affected seeds were generated on iPhones and iPads using any browser before October 18, on Macs using Safari before that date, or through the Qubic iOS app before July 2025.
Qubic's validators, called Computors, coordinated a network halt at tick 85,371,949 to prevent further movement of stolen funds. With transactions paused, 87.1% of the drained funds remain frozen on the network. The remaining 12.9% was sent to MEXC, which froze the receiving account within approximately one hour. Major exchanges have suspended QUBIC deposits and withdrawals.
Qubic stated that the seed generation issue has been fixed in version 4.26.4, preventing the creation of new weak seeds under the corrected system. The Computor quorum will determine how to resolve the incident according to network rules, while the core team identifies affected identities and prepares options for the quorum. A community poll on Discord is gathering user feedback.
The network has urged affected users to report the incident to local police or cybercrime authorities, providing the wallet ID, amount lost, and transaction link from the Qubic explorer.
