Qubic’s validators halted the blockchain on October 18, 2026, after an attacker drained about 2.94 trillion QU, worth roughly $1.4 million, from 1,404 wallets. The source attributes the theft to predictable wallet seeds generated with JavaScript’s Math.random(), not a bug in Qubic’s core protocol. It says the affected wallets were created in any browser on an iPhone or iPad, in Safari on a Mac before October 18, 2026, or in the Qubic iOS app before July 2025.
The halt kept 87.1% of the drained funds on the Qubic network; the remaining 12.9% was moved to MEXC, which froze the receiving account. Qubic patched web-wallet seed generation in version 4.26.4, but no network restart date has been announced. The team is identifying affected wallets, and recovery options are to go to a validator vote.
