GoKawiilQubic pauses mainnet after $1.3M exploit tied to weak wallet seeds
An attacker drained roughly 2.94 trillion QU tokens, worth about $1.3 million, from 1,404 Qubic wallets over a 104-minute window on October 17-18, 2026. Qubic's validators halted the chain to freeze the stolen funds, and developers say the breach stemmed from predictable recovery seeds generated on older Apple devices and browsers rather than a flaw in the network's code itself.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident shows how vulnerabilities in client-side key generation can undermine a blockchain even when its core protocol remains secure, raising questions about how wallet software across the industry handles randomness. Validators' ability to halt the chain and freeze most of the stolen funds suggests Qubic retains centralized emergency controls unusual for many blockchains, which could reassure some users while concerning others focused on decentralization. Whether affected users are reimbursed depends on validator decisions still pending, and the recurrence of a second security incident this year may weigh on confidence in Qubic's broader ecosystem.
- About 2.94 trillion QU (~$1.3M) was stolen from 1,404 wallets due to weak seed generation on older Apple/Safari/iOS clients.
- Validators froze roughly 87.1% of stolen funds on-chain, while about 12.9% reached MEXC, which froze the receiving account.
- Qubic released a patched client (4.26.4) but has not announced a mainnet restart date; this is the network's second security incident in 2026.
Ledger Nano X Hardware Wallet — This exploit shows how disastrous weak seed generation can be for crypto holders. A hardware wallet like the Ledger Nano X generates and stores your private keys in a dedicated secure chip, isolated from vulnerable browsers or apps, giving you much stronger protection against the kind of predictable-seed attacks that hit Qubic users.
See Ledger Nano X Hardware Wallet on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: techreport.com — Krishi Chowdhary, 2026-10-19
Published there as: “Qubic halts mainnet after seed exploit drains 1,404 wallets”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.