Key facts
- Approximately $1.4 million stolen from 1,404 Qubic wallets.
- Exploit targeted weak wallet seeds generated on specific Apple devices and Qubic iOS app.
- 87.1% of stolen funds remain frozen on the Qubic network.
- Remaining 12.9% of stolen funds sent to MEXC and frozen by the exchange.
- Qubic patched seed generation vulnerability by switching to crypto.getRandomValues().
The Qubic blockchain network was halted on October 18, 2026, after an attacker exploited a vulnerability in its wallet seed generation process, draining approximately $1.4 million from over 1,404 accounts. The exploit, which ran for about 104 minutes, targeted seeds generated using JavaScript’s Math.random() on iPhones, iPads, Safari on Macs before October 18, 2026, or the Qubic iOS app before July 2025. Qubic stated that 87.1% of the stolen funds remain on the network, while the remaining 12.9% was sent to the MEXC exchange, which subsequently froze the account within an hour. The project has since patched the seed generation flaw and is preparing recovery options for network validators to vote on.