Qubic pauses network after seed flaw affects 1,404 wallets
📋 Summary
Qubic halted its network after an attacker drained about 2.94 trillion QUBIC from 1,404 wallets. The issue was caused by the low randomness used to create seeds on Apple devices, and affected users need to generate a new seed using the patched wallet version.
Qubic halted transaction processing after an attacker drained 1,404 wallets and transferred approximately 2.94 trillion QUBIC. The incident took place between 23:42 on October 17 and 01:26 on October 18, UTC, and was attributed to a flaw in the seed generation of certain wallets—not in the blockchain’s core protocol.
According to Qubic’s official update, the affected seeds were created with insufficient randomness, which may have allowed the attacker to reconstruct predictable combinations and take control of the funds. The team said the network was halted at tick 85,371,949 to prevent further transfers.
Between 23:42 UTC on October 17 and 01:26 UTC on October 18, an attacker drained 1,404 Qubic wallets.— Qubic (@_Qubic_) October 18, 2026
Who may have been affected by the flaw
The list of potentially exposed environments includes seeds generated in any iPhone or iPad browser before October 18, 2026, in Safari for Mac before the same date, and in the Qubic app for iOS before July 2025. A seed is the secret sequence from which a wallet derives its private keys; if it can be predicted, funds can be moved without the owner’s authorization.
The recommendation is to treat these seeds as compromised even if the address does not appear among the drained wallets. Wallet version 4.26.4 replaced the previous method with a cryptographically secure source of randomness, but the update does not fix old seeds.
📋 Summary
Qubic halted its network after an attacker drained about 2.94 trillion QUBIC from 1,404 wallets. The issue was caused by the low randomness used to create seeds on Apple devices, and affected users need to generate a new seed using the patched wallet version.
Qubic halted transaction processing after an attacker drained 1,404 wallets and transferred approximately 2.94 trillion QUBIC. The incident took place between 23:42 on October 17 and 01:26 on October 18, UTC, and was attributed to a flaw in the seed generation of certain wallets—not in the blockchain’s core protocol.
According to Qubic’s official update, the affected seeds were created with insufficient randomness, which may have allowed the attacker to reconstruct predictable combinations and take control of the funds. The team said the network was halted at tick 85,371,949 to prevent further transfers.
Between 23:42 UTC on October 17 and 01:26 UTC on October 18, an attacker drained 1,404 Qubic wallets.— Qubic (@_Qubic_) October 18, 2026
Who may have been affected by the flaw
The list of potentially exposed environments includes seeds generated in any iPhone or iPad browser before October 18, 2026, in Safari for Mac before the same date, and in the Qubic app for iOS before July 2025. A seed is the secret sequence from which a wallet derives its private keys; if it can be predicted, funds can be moved without the owner’s authorization.
The recommendation is to treat these seeds as compromised even if the address does not appear among the drained wallets. Wallet version 4.26.4 replaced the previous method with a cryptographically secure source of randomness, but the update does not fix old seeds.