Qubic Halts Blockchain After $1.4M Wallet Seed Exploit

Qubic halts blockchain — The Qubic layer-1 blockchain network has been halted since Sunday after an attacker exploited a vulnerability in wallet seed generation to drain approximately $1.4 million from over 1,400 accounts.

The project stated the flaw affected seeds generated using any browser on an iPhone or iPad, Safari on a Mac until October 18, 2026, or the Qubic iOS app before July 2025. This led to the theft of 2.94 trillion Qubit (QU) tokens. Qubic said 87.1% of the stolen funds remain frozen on its network, while the remaining 12.9% was sent to the MEXC exchange, which froze the receiving account.

The core vulnerability was the use of JavaScript’s non-cryptographic Math.random() function for seed generation. Qubic has since released a fix in its web wallet version 4.26.4, replacing it with the secure crypto.getRandomValues() function.

The network’s validators, known as Computors, will vote on a recovery plan for the frozen funds. Qubic’s team is identifying affected wallets and preparing options, with a full technical report to follow. The network remains paused with no announced restart time.