# Qubic Blockchain Halted Following Massive Wallet Seed Exploitation

Network operations paused after weak seed generation led to 1,400 compromised accounts.

- **Source:** [Cointelegraph.com News](https://brifing.si/source/2e81e982-0137-4db0-8ac2-351f37085775)
- **Published:** 2026-10-19
- **Topic:** [Software & Engineering](https://brifing.si/c/engineering)
- **Original article:** <https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound>
- **On Brifing:** https://brifing.si/s/5ad3d145-933f-48c5-9644-267e6241335c

## Network Operations Halted

Qubic suspended its layer-1 blockchain operations at tick 85,371,949 following a security breach. The network remains paused while developers address the vulnerability. This emergency measure was taken after an attacker drained approximately 1.4 million dollars from over 1,400 accounts. The team is currently working to stabilize the ecosystem before resuming normal operations.

## Seed Generation Vulnerability

The exploit originated from weakly generated wallet seeds across specific platforms. Affected users include those using Safari on Mac, browsers on iPhones or iPads, and the Qubic iOS app prior to July 2025. This flaw allowed unauthorized access to 2.94 trillion Qubit tokens, highlighting the critical risks associated with improper cryptographic implementation in wallets.

## Asset Recovery Status

Qubic reports that 87.1 percent of the stolen funds remain frozen on the network. The remaining 12.9 percent were transferred to the MEXC exchange, which successfully froze the receiving account within one hour of the incident. These frozen assets are currently held pending a formal recovery plan to be determined by network validators.

## Technical Remediation Steps

The development team addressed the root cause in version 4.26.4 of the web wallet. They replaced the insecure JavaScript Math.random function with the cryptographically secure crypto.getRandomValues function. This update ensures that future wallet seeds are generated using robust entropy, preventing similar predictable seed attacks that have historically plagued various blockchain wallet implementations.

## Governance and Recovery

Qubic’s core team is currently identifying all affected wallets to prepare comprehensive recovery options. These proposals will be submitted to the network’s Computors for a formal vote. The decision-making process will determine the final distribution or restoration of the frozen funds, with a full technical report expected following the conclusion of the recovery.

## Broader Security Context

This incident follows a series of similar attacks involving weak wallet seeds across the industry. Previous vulnerabilities affected Coldcard firmware, Trust Wallet browser extensions, and the Libbitcoin Explorer tool in 2023. These recurring issues emphasize the persistent challenge of maintaining secure entropy in client-side cryptographic operations across diverse hardware and software wallet environments.

## Blockchain Architecture Overview

Qubic operates as a layer-1 blockchain supporting fee-less transactions and smart contracts. It utilizes a unique Useful Proof of Work consensus mechanism, which repurposes mining energy to train artificial intelligence models. At the time of the incident, the project maintained a market capitalization of approximately 62.6 million dollars according to CoinGecko data.

## Industry Crime Trends

Security exploits remain a significant threat, accounting for 19 percent of crypto crime cases in the third quarter. Despite the lower frequency of cases, these exploits represent 40 percent of total reported losses. This data underscores the disproportionate financial impact that technical vulnerabilities have on blockchain networks compared to other forms of digital asset crime.

## Sources covering this story

- https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
