Qubic reported that an attacker drained about 2.94 trillion QU from 1,404 wallets between October 17 and 18, 2026. The team attributed the theft to insufficient randomness in some seed phrases, not a flaw in the Qubic protocol.
Qubic said computors halted the network, leaving transactions unprocessed and freezing 87.1% of the stolen funds. It said the attacker had sent the remaining 12.9% to MEXC, which froze the recipient’s account. A quorum of computors must decide the next steps.
According to Qubic, seed phrases made before October 18, 2026, on an iPhone or iPad using any browser, or on a Mac using Safari, may be at risk. Those made in the Qubic iOS app before July 2025 may also be at risk. Qubic said it corrected seed phrase generation in version 4.26.4.
