Qubic Pauses Blockchain Network After $1.4 Million Exploit Drains 1,400 Wallets
Qubic (QU) halted operations after an attacker exploited weak wallet seed generation to drain approximately $1.4 million from over 1,400 accounts. The flaw affected wallet seeds created through iOS browsers, Safari on Mac, or older versions of the Qubic mobile app. The network was paused at block tick 85,371,949 following the theft of roughly 2.94 trillion Qubit tokens.
The vulnerability stemmed from using an insecure random number function in JavaScript when generating wallet keys, which has since been patched in the web wallet's latest release. The vast majority of the stolen assets—about 87.1%—were successfully frozen directly on the Qubic network, while the remaining 12.9% sent to cryptocurrency exchange MEXC were frozen by the platform's team within an hour of arrival.
Qubic developers are working to identify affected accounts and outline fund recovery options. Network validators, known as Computors, will vote on how to address the frozen assets once plans are finalized. A full technical post-mortem report will follow, though no official timetable has been released for restarting network operations.
Key points
- Qubic paused its layer-1 blockchain network after a wallet seed generation flaw led to a $1.4 million theft affecting over 1,400 accounts.
- Network operators fixed the seed creation flaw by replacing JavaScript Math.random with a cryptographically secure random values function.
- Roughly 87.1% of stolen funds remain locked on the Qubic chain, and exchange MEXC froze the remaining 12.9% sent to its platform.
- Network Computors will vote on recovery options for affected accounts once a plan is established, with no restart date set yet.
Written by our AI from expert market sources across the web. It can contain mistakes: check the facts before acting on them. Write-ups powered by the free AI API at FreeTheAI.org
How we writeDisclaimerQuestions and answers
Why did Qubic freeze its blockchain network?
Qubic halted network operations after an attacker exploited a weak wallet seed generation flaw, draining roughly $1.4 million across more than 1,400 accounts.
What happened to the stolen Qubic funds?
About 87.1% of the stolen funds remain frozen directly on the Qubic network, while the remaining 12.9% were frozen by cryptocurrency exchange MEXC shortly after transfer.
How was the Qubic wallet vulnerability fixed?
Developers updated the web wallet code to replace JavaScript Math.random with a cryptographically secure random number function for generating new seeds.