Qubic Suspends Network Following Large Crypto Wallet Theft
The Qubic network has halted transactions after a security flaw led to the theft of 2.94 trillion tokens from user wallets.
Updated on Oct. 20, 2026 in Cybersecurity
Live Poll
Do you trust the security of the seed generation process in your crypto wallet apps?
Qubic suspended all transaction processing after an attacker drained 1,404 wallets of 2.94 trillion QU tokens. The breach, valued at between $1.3 million and $1.4 million, forced validators to halt the network to prevent further asset liquidation.
Why it matters
The compromise originated from wallet seeds generated with insufficient randomness, affecting users on specific Apple devices and older versions of the Qubic iOS app. This incident highlights the critical importance of secure random number generation in cryptographic wallet systems.
The exploit targeted wallet seeds created on certain Apple devices before 18 October 2026 or within the Qubic iOS app prior to July 2025. Wallet version 4.26.4 has since been released to resolve the insecure seed generation method.
The players
Qubic
Qubic is a cryptocurrency network that relies on a unique quorum-based consensus mechanism to validate transactions.
MEXC
MEXC is a global centralized cryptocurrency exchange that provides trading services for a wide variety of digital assets.
The details
The attacker reconstructed private wallet seeds by exploiting predictable randomness in the generation process, allowing them to access and drain assets. Validators coordinated a network halt at tick 85,371,949, successfully freezing 87.1 percent of the stolen QU on-chain, while the remaining 12.9 percent were frozen after reaching the exchange MEXC.
Timeline
The vulnerability period for Qubic iOS app users ended in July 2025.
The theft began at 23:42 UTC on 17 October 2026.
The unauthorized access concluded at 01:26 UTC on 18 October 2026.
The Tech Race
This breach underscores the ongoing arms race between developers and hackers targeting the foundational security of digital wallet infrastructure. It highlights how legacy cryptographic vulnerabilities continue to threaten decentralized networks as they attempt to scale.
Users who generated wallet seeds on specific Apple devices or older Qubic iOS app versions should update to version 4.26.4 immediately to ensure their security. Deposits and withdrawals remain suspended across exchanges, preventing users from moving assets until the network resumes operations.
The takeaway
Users should prioritize using updated wallet software to patch known vulnerabilities before storing significant assets. This incident serves as a stark reminder that even decentralized platforms can be compromised when the underlying random generation protocols are flawed.
What happens next
The project team is expected to publish a comprehensive technical report once a full recovery plan for the stolen assets has been finalized.
Further reading
For more information on digital asset protection, visit the Cybersecurity section.
Live Poll
Do you trust the security of the seed generation process in your crypto wallet apps?
