Qubic halts mainnet after seed exploit drains 1,404 wallets

An attacker drained about 2.94 trillion QU tokens, worth roughly $1.3 million, from 1,404 Qubic wallets, prompting the network to pause its mainnet on October 18, 2026. The exploit was traced to weak, predictable recovery seeds generated on legacy Apple devices, Safari and early iOS apps; client version 4.26.4 fixes seed generation. About 87.1% of the stolen tokens remain frozen on-chain, while 12.9% reached MEXC, which froze the receiving account.

• ~2.94 trillion QU worth ~$1.3M stolen from 1,404 wallets
• Attack ran from 23:42 UTC Oct 17 to 01:26 UTC Oct 18
• 87.1% of funds frozen on-chain, 12.9% reached MEXC
• Validators halted the chain at tick 85,371,949