Qubic Suspends Network Following Massive 2.94 Trillion QU Security Breach
Weak wallet seed generation leads to 1,404 compromised accounts and immediate chain halt.
1Network Halt Initiated
Qubic suspended its network at tick 85,371,949 to prevent further unauthorized fund movements. This emergency measure followed the discovery of a security breach occurring between October 17 and October 18. The halt effectively locked the majority of stolen assets on-chain, preventing the attacker from liquidating the 2.94 trillion QU drained from users.
2Scope of the Exploit
The attacker successfully compromised 1,404 individual wallets during the incident. Approximately 87.1% of the stolen 2.94 trillion QU remains trapped within the Qubic network due to the rapid suspension. The remaining 12.9% of funds were transferred to the MEXC exchange, which subsequently froze the receiving accounts following direct communication from the project.
3Root Cause Analysis
The security failure originated from insufficient randomness in the generation of wallet seeds. Impacted versions include all seeds generated before October 18, 2026, specifically those created via Safari on Mac or the Qubic iOS application prior to July 2025. The protocol itself remained secure, but the client-side seed generation process proved critically vulnerable.
4Immediate Technical Remediation
Qubic released version 4.26.4 to address the seed generation flaw and prevent the creation of further weak seeds. The development team is currently identifying all affected wallets to facilitate potential recovery efforts. Users are advised to update their software immediately to ensure that new wallet seeds meet the necessary cryptographic randomness standards.
5Governance and Recovery
The final decision regarding the frozen funds rests with the Computor quorum, adhering to established network governance rules. The project is currently conducting a community poll on Discord to gauge sentiment before formalizing a recovery proposal. No official timeline for resuming normal transaction processing has been announced by the core team yet.
6User Action Requirements
Affected users are urged to report the incident to cybercrime authorities and provide their specific wallet IDs, loss amounts, and transaction explorer links. Qubic emphasized that their team will never initiate contact to request private wallet seeds or offer paid recovery services, warning users to remain vigilant against opportunistic recovery scams.
7Exchange Coordination Efforts
Beyond the intervention at MEXC, Qubic has notified multiple other exchanges to suspend deposits and withdrawals associated with the compromised wallets. This coordinated effort aims to isolate the stolen assets and prevent the attacker from laundering funds through external platforms. Formal reports to these exchanges are essential for maintaining the current asset freezes.
8Future Transparency Outlook
The project committed to releasing a full technical report once the network reaches a consensus on the recovery of frozen funds. This incident highlights the critical importance of secure entropy in client-side wallet generation. Future updates will likely focus on strengthening seed generation protocols to prevent similar vulnerabilities from impacting the ecosystem again.