Qubic Wallet Hack Freezes a Whole Blockchain

The Qubic wallet hack just forced an entire blockchain to hit pause. An attacker emptied more than fourteen hundred wallets in under two hours, and the network's operators responded by halting the chain itself, according to Cointelegraph.

What actually happened

Qubic is a layer-one blockchain network. On Sunday, its operators stopped it after an attacker drained roughly one point four million dollars from more than fourteen hundred accounts. The project says the network was halted at a specific checkpoint, called a tick, and that it remains paused.

The project's own timeline says the drain ran from late Saturday night to just after one in the morning UTC on Sunday. Roughly two point nine four trillion QU tokens moved out of the affected wallets, according to BeInCrypto. That number sounds huge only because the token trades for a tiny fraction of a cent.

The Qubic wallet hack is not a bug in the blockchain's rules. The team stressed that the issue was in seed generation, not in the Qubic protocol itself.

The weak seed problem, explained

A seed is the secret phrase that creates a wallet's private keys. Whoever has the seed owns the money. For that to be safe, the phrase has to come from a truly random source that nobody can guess.

Qubic says seeds were too predictable when they were created in any browser on an iPhone or iPad, or in Safari on a Mac, before the eighteenth of October. Seeds from the Qubic iOS app made before July of last year are also on the list. Seeds made on other devices are not on the list.

A code change shows the old method relied on a random function that is not meant for secrets. It was swapped for a cryptographically secure one, per the same Cointelegraph report. Think of it like a lock whose possible keys could be rebuilt by someone patient enough to try.

Where the stolen money is now

Here is the one bit of good news. Qubic says most of the drained funds never left the network and are frozen in place, and the rest went to the exchange MEXC, whose team froze the receiving account within about an hour.

Halting the chain is what keeps those tokens stuck. The catch is that nobody can use the network while it is paused. Network operators, known as Computors, still have to vote on a recovery plan, and no restart date has been announced, according to Bitbase.

Why Gen Z crypto users should care

Plenty of people first touch crypto on a phone, and plenty of those phones are iPhones. If a wallet was created in a browser on one, that detail suddenly matters. Even wallets that were not drained could hold a weak seed, so Qubic users are being told to treat affected seeds as compromised and to follow the project's official steps once the network restarts.

This also is not the first time randomness has burned crypto holders. Cointelegraph points to earlier cases, including a firmware bug that weakened seeds on Coldcard hardware wallets in July and flaws in Trust Wallet's browser extension and a Libbitcoin tool in earlier years. The pattern is clear: wallet software is only as safe as its random number generator.

For anyone holding coins, the lesson is practical. Keep an eye on official announcements, never type a seed into a random site, and be wary of fake recovery messages, because scammers love a headline like this one. For more on the money side, see our crypto coverage.

What to watch next

The big open question is the recovery vote. Core developers are mapping which wallets were hit and preparing proposals for the Computors. Until that happens, the Qubic wallet hack stays a live story, and holders are stuck waiting.

It is also a reminder that a chain can be perfectly sound and still lose users' money through a small mistake at the edge, in the place where a wallet first makes its secrets. That is a lesson the whole industry keeps relearning, and each repeat makes newcomers a little more cautious about where they create a wallet.