Qubic Weak-Seed Wallet Drain

On October 18, 2026, the Qubic network halted its mainnet after an attacker emptied 1,404 wallets generated with predictable seeds, carrying off nearly 2.94 trillion QU worth approximately $1.4 million. The flaw was not in the blockchain protocol but in how Qubic's wallet software produced seed phrases, which made the private keys guessable for a large class of users.

What happened

Qubic's wallet tooling generated seed material using JavaScript's Math.random(), a pseudo-random function that is explicitly unsuitable for cryptographic secrets because its output is predictable and not sourced from a secure entropy pool. Any key derived from such a seed can, in principle, be reconstructed by an attacker who reproduces the generator's state. Qubic said the weakness affected seeds created in any browser on an iPhone or iPad, in Safari on a Mac until October 18, 2026, or in the Qubic iOS app before July 2025. A GitHub commit for wallet version 4.26.4 shows the project replacing Math.random() with the secure crypto.getRandomValues() API.

The drain ran from roughly 23:42 UTC on October 17 to 01:26 UTC on October 18, during which the attacker swept 1,404 affected accounts and consolidated the proceeds. Validators then suspended the network at tick 85,371,949 to stop the stolen tokens from moving further. According to Qubic, 87.1% of the drained funds never left the network and remain frozen in place by the halt, while the remaining 12.9% had already been sent to the exchange MEXC, whose team froze the receiving account within about an hour.

Aftermath

Qubic's core team said it was identifying the affected wallets and preparing recovery options to be put to a vote by the network's Computors, who will decide what happens to the frozen funds; a full technical report was promised once a plan is settled. The chain remained paused at the time of writing with no announced restart date. Bitget suspended QUBIC deposits and withdrawals while the situation remained unresolved. No funds had been returned to users, and because previously generated weak seeds may stay vulnerable even after the fix, affected holders were urged to move any assets to freshly generated wallets once the chain resumes. QU's market capitalization stood at roughly $62.6 million.

Why it matters

The Qubic incident is a textbook failure of client-side key generation: the protocol itself was never exploited, yet every wallet built on a weak random-number generator was effectively public. It echoes Wintermute, whose $160 million loss traced to the Profanity vanity-address tool producing private keys from insufficient entropy — the same root cause a world apart in scale. The episode also shows the double edge of a network that can halt and freeze at will: the Computor model let Qubic freeze 87% of the loot in place, a backstop no immutable chain offers, but one that depends on a small, coordinated validator set rather than on the keys being secure in the first place. For users, the lesson is blunt — a seed is only as safe as the randomness that made it.