AnswersPublished16 sources
How Qubic Responded to the $1.4M Wallet-Seed Theft
Qubic said weak wallet seed generation—not its layer 1 protocol—enabled the theft of 2.94 trillion QU from 1,404 accounts on October 17–18, 2026. The affected seed generation environments included iPhone and iPad browsers, Mac Safari before October 18, 2026, and the Qubic iOS app before July 2025.
Published byEdited with GPT-6 LunaImages generated with GPT Image 2
Research answer
Key takeaways
- Qubic said weak wallet seed generation—not its layer 1 protocol—enabled the theft of 2.94 trillion QU from 1,404 accounts on October 17–18, 2026.
- The affected seed generation environments included iPhone and iPad browsers, Mac Safari before October 18, 2026, and the Qubic iOS app before July 2025.
- Qubic urged users with web wallets created before version 4.26.4 to create a new wallet and move their funds; updating the software alone does not replace an old seed.
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: How did Qubic respond to the wallet-seed vulnerability—not a flaw in its layer-1 protocol—that enabled an attacker to steal approximately $1. Article summary: Qubic responded by patching wallet seed generation, halting transactions to contain the theft, securing affected funds and obtaining Computor approval for recovery; it said the vulnerability was in wallet creation, not i. Topic tags: general, general web, user generated, documentation. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks,
Qubic traced the theft of approximately 2.94 trillion QU—about $1.4 million—from 1,404 wallets to weak seed generation, not a flaw in its layer-1 protocol. The attack ran from 23:42 UTC on October 17 to 01:26 UTC on October 18, 2026. Qubic’s response combined a wallet patch, a temporary network halt, protection of remaining funds and a recovery process for verified owners.13
15
What caused the wallet theft
Some Qubic wallet seeds were generated with insufficient randomness, making them weaker and more predictable than they should have been. The attacker used that weakness to access affected wallets; the incident did not involve breaking Qubic’s transaction-validation protocol, according to the project.15
Qubic identified seeds created in any browser on an iPhone or iPad, or in Safari on a Mac, before October 18, 2026, as affected. Seeds created in the Qubic iOS app before July 2025 were also in scope.15
The project fixed seed generation in web wallet version 4.26.4. The update replaced JavaScript’s Math.random() with crypto.getRandomValues(), which is intended for cryptographic randomness.9
Why Computors halted the chain
Qubic’s validators, known as Computors, halted transaction processing at tick 85,371,949 to prevent further movement of the stolen funds while the incident was contained and recovery considered.11
15
Qubic reported that 87.1% of the stolen tokens remained on-chain. The other 12.9% reached MEXC, which froze the receiving account within about an hour.9
15 During the halt, Qubic said affected funds were moved into protected escrow rather than left exposed through compromised wallets.
Network restart and recovery
Transaction processing resumed on the evening of October 19, according to reporting on the restart. On October 20, Qubic said the Computor quorum had approved the recovery plan, the reclaim platform was open and the first funds had been returned to verified owners.11
That announcement confirms repayments had begun; it does not establish that all affected users had been reimbursed. Reporting said claims would be accepted through May 1, 2027. One account of the claim process said applicants would provide the compromised wallet identity and a destination identity. The supplied reports do not establish every claim requirement, so users should check Qubic’s own current instructions rather than rely on unverified descriptions of the process.
What wallet users should do
Qubic warned that web wallets created before version 4.26.4 should be treated as insecure even if their funds were not stolen. Its advice was to update to version 4.26.4 or later, create a new wallet and move funds to it; simply updating does not replace an existing seed.1
The project also warned users about recovery scams: Qubic representatives would not message users first, ask for a seed or offer recovery services for a fee. Do not share a seed with anyone claiming they can process a refund.16
What remains unclear
The announcements and reporting cited here confirm that a claim process opened and that verified owners began receiving funds. They do not explain in detail how disputed claims, appeals, payout order or cases with incomplete ownership evidence are handled. The start of repayments should therefore not be read as a guarantee of automatic or equal reimbursement for every claimant.11
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
People also ask
What is the short answer to "How Qubic Responded to the $1.4M Wallet-Seed Theft"?
Qubic said weak wallet seed generation—not its layer 1 protocol—enabled the theft of 2.94 trillion QU from 1,404 accounts on October 17–18, 2026.
What are the key points to validate first?
Qubic said weak wallet seed generation—not its layer 1 protocol—enabled the theft of 2.94 trillion QU from 1,404 accounts on October 17–18, 2026. The affected seed generation environments included iPhone and iPad browsers, Mac Safari before October 18, 2026, and the Qubic iOS app before July 2025.
What should I do next in practice?
Qubic urged users with web wallets created before version 4.26.4 to create a new wallet and move their funds; updating the software alone does not replace an old seed.
Sources
blockonomi.comQubic Attack Drains 1,404 Wallets as 87.1% of Stolen QU Stays Frozen After Network Halt
x.comQubic
coincentral.comcoincentral.com · qubic-halts-blockchain-after-1-4-millionQubic Halts Blockchain After $1.4 Million Wallet Hack