The Qubic blockchain network halted operations after an attacker exploited weaknesses in wallet seed generation to drain approximately $1.4 million in cryptocurrency from more than 1,400 accounts. The incident affected 1,404 wallets and involved approximately 2.94 trillion Qubit (QU) tokens, according to information released by the project on October 18, 2026. Qubic said the network was paused at tick 85,371,949 while the team worked to contain the incident and determine how affected users could recover their funds.

The vulnerability involved wallet seeds generated with insufficient randomness, making some wallet credentials more predictable than they should have been. A wallet seed is a critical secret used to derive the cryptographic keys that control digital assets. If the seed can be predicted or reconstructed, an attacker may be able to derive the corresponding keys and access funds without needing to compromise the blockchain's consensus mechanism directly.

Qubic identified several potentially affected wallet-generation environments. These included wallets created using browsers on iPhones and iPads, Safari on Mac computers before October 18, 2026, and the Qubic iOS application before July 2025. The project said it had corrected the seed-generation issue in the latest version of its web wallet. A code change for version 4.26.4 replaced JavaScript's Math.random() with the cryptographically secure crypto.getRandomValues() function.

The attack reportedly resulted in the theft of approximately 2.94 trillion QU. Qubic said that 87.1% of the drained funds remained on its network and were frozen after the halt. The remaining 12.9% was transferred to cryptocurrency exchange MEXC, whose team reportedly froze the receiving account within about an hour. These figures are based on Qubic's statements, and the ultimate recovery of the assets has not yet been established.

The network halt was a significant response because it interrupted normal blockchain operations to prevent the movement of the affected funds. However, pausing a blockchain also creates operational uncertainty for users who rely on it to send transactions or interact with applications. Qubic had not announced a confirmed restart time in the available reporting, leaving users waiting for further technical and governance updates.

Qubic said its core team was identifying affected wallets and preparing recovery options for a vote by the network's Computors, which participate in the network's consensus and governance processes. The vote is expected to determine how the frozen assets should be handled. The project also said it would publish a detailed technical report after a recovery plan had been agreed upon.

The incident highlights a recurring security problem across the cryptocurrency industry: weaknesses in the process used to generate wallet secrets can undermine otherwise secure blockchain infrastructure. Similar problems have previously affected crypto wallets and tools, including cases involving predictable seed generation. Using a cryptographically secure source of randomness is essential because wallet security depends on private keys being practically impossible to guess or reconstruct.

For users, the incident reinforces the importance of checking whether a wallet application or seed-generation method has been affected by a security advisory. Users should rely on official project updates, avoid sharing recovery phrases or private keys, and never enter secret wallet information into third-party websites claiming to offer recovery assistance. A wallet checker should require only a public address, never a seed phrase.

For the wider crypto industry, Qubic's response raises questions about the trade-off between protecting funds and maintaining network availability. A coordinated halt may help contain an incident when stolen assets remain onchain, but it also places the network's ability to recover and restart under scrutiny. The outcome will depend on the technical investigation, the governance decision and whether affected users can ultimately regain access to their assets.