Qubic Halts Layer-1 After $1.4M Token Theft From Wallet Flaw
Qubic stopped its layer-1 blockchain on October 18 after attackers exploited a wallet seed generation flaw to steal 2.94 trillion QU tokens valued at $1.4 million from over 1,400 accounts. The core team said most stolen funds remain frozen on-chain pending a path forward.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
The Breach and Network Response
Qubic halted its layer-1 blockchain after an attacker exploited a wallet seed generation vulnerability to drain approximately 2.94 trillion QU tokens—worth $1.4 million at the time—from more than 1,400 user accounts. The Qubic core team disclosed the incident in an October 18 statement, confirming the security flaw centered on how the wallet software generated private key seeds during account creation.
The team emphasized that most of the stolen tokens remain frozen on-chain rather than being moved to external addresses or exchanges. This immobilization on-chain gives the project time to formulate a recovery or remediation approach, though the path forward has not yet been announced.
Root Cause and Blame
Qubic has characterized the incident as a wallet seed generation flaw rather than a protocol-level vulnerability in the blockchain itself. The distinction matters: the weakness lay in how user wallets were initialized, not in Qubic's core consensus or transaction validation. This framing shifts responsibility partly to users who may not have recognized weak entropy in their seed generation process, though the core team stopped short of fully absolving itself of responsibility for shipping inadequate tooling.
The prolonged network halt while stolen funds sit frozen signals the team is still evaluating options, which may range from a coordinated rollback of the affected transactions to a token holder vote on compensation or recovery mechanisms.
Why It Matters
For Traders
QU liquidity and price discovery are severely constrained while the network is halted; any position carries execution and listing risk until the team signals restart conditions.
For Investors
A wallet-level exploit affecting over 1,400 accounts erodes confidence in Qubic's infrastructure quality and delays any near-term roadmap execution until the incident is fully resolved.
For Builders
Projects considering Qubic as a deployment target should pause and audit the stack for similar seed generation or entropy weaknesses before committing capital or user flows.
This article is for information only and is not financial advice. Read the full disclaimer.
