---
title: Qubic halts its network after an attacker drained 1,404 wallets with weakly generated seeds (iPhone/iPad browsers, Mac Safari, old iOS app) | ctxsec
url: https://ctxsec.com/items/qubic-weak-seed-wallet-drain-2026-10
description: ""
status: "confirmed (Qubic statement)"
published: 2026-10-18
---

> 

[← Cybersecurity News](/news) · [markdown](/items/qubic-weak-seed-wallet-drain-2026-10.md)

confirmed (Qubic statement)

2026-10-18

### Qubic halts its network after an attacker drained 1,404 wallets with weakly generated seeds (iPhone/iPad browsers, Mac Safari, old iOS app)

Qubic says an attacker drained 1,404 wallets, about 2.94 trillion QU, between 23:42 UTC on Oct 17 and 01:26 UTC on Oct 18 (7:42–9:26 PM ET Oct 17). Some wallet seeds had been generated with too little randomness, so the attacker could reproduce them. Qubic says the flaw was in seed generation, not in the Qubic protocol. Seeds are affected if they were created on an iPhone or iPad in any browser before Oct 18, 2026, on a Mac in Safari before Oct 18, 2026, or in the Qubic iOS app before July 2025. Computors (the network's validators) halted the network at tick 85,371,949. Qubic says 87.1% of the drained funds never left the network and are frozen. The other 12.9% went to MEXC, which froze the receiving account within about an hour, and exchanges have suspended QUBIC deposits and withdrawals. Seed generation is fixed in version 4.26.4. Any recovery is up to the Computor quorum. Qubic asks victims to file a police report with their wallet ID, amount and transaction link. It also warns that it will never message first, ask for a seed or charge for recovery, so treat any 'recovery service' offer as a scam. If your seed came from an affected platform, assume it's exposed and move funds to a new seed from the fixed version once the network resumes. Lesson: client-side key generation is only as strong as the browser's random-number source.

Sources: [Qubic incident thread (Oct 18)](https://x.com/_Qubic_/status/2111796725677715474) · [Qubic: affected seeds](https://x.com/_Qubic_/status/2111796743348371956) · [Qubic: funds frozen / MEXC](https://x.com/_Qubic_/status/2111796753767026952)