📢 Flash
Qubic discloses security incident: approximately $1.3 million in QU stolen, involving 1,404 Qubic wallets.
On October 18, Qubic issued an announcement stating that, between 23:42 and 01:26 UTC on the previous day, attackers exploited insufficient randomness in the seed generation of certain wallets to access 1,404 Qubic wallets and drain approximately 2.94 trillion QU. Qubic emphasized that the issue stems solely from the seed generation mechanism—not from the Qubic protocol itself. Affected seeds fall into three categories:
- Seeds created in any browser on iPhone or iPad before October 18, 2026;
- Seeds created in Safari on Mac before October 18, 2026;
- Seeds generated via the Qubic iOS App before July 2025.
The network has been paused at tick 85,371,949. Of the stolen funds, 87.1% remains on the Qubic network and is frozen; the remaining 12.9% has been transferred to MEXC, and the corresponding receiving accounts have also been frozen. Qubic confirmed that the seed-generation vulnerability has been patched in version 4.26.4. Next steps will be determined by the Computor quorum under existing network rules. A full technical report will be published after the fund recovery plan is finalized.
- Seeds created in any browser on iPhone or iPad before October 18, 2026;
- Seeds created in Safari on Mac before October 18, 2026;
- Seeds generated via the Qubic iOS App before July 2025.
The network has been paused at tick 85,371,949. Of the stolen funds, 87.1% remains on the Qubic network and is frozen; the remaining 12.9% has been transferred to MEXC, and the corresponding receiving accounts have also been frozen. Qubic confirmed that the seed-generation vulnerability has been patched in version 4.26.4. Next steps will be determined by the Computor quorum under existing network rules. A full technical report will be published after the fund recovery plan is finalized.
