The Layer-1 blockchain network Qubic suspended operations on Sunday following a security breach. An attacker exploited vulnerabilities in wallet seed generation to compromise over 1,400 accounts, resulting in the theft of approximately $1.4 million worth of assets. The network halt occurred at tick 85,371,949 and remains in effect.
The vulnerability stemmed from the use of insecure random number generation in specific environments, including Safari on Mac, browsers on iPhones and iPads, and the Qubic iOS app prior to July 2025. This flaw led to the unauthorized transfer of 2.94 trillion Qubit tokens. Qubic has since updated its web wallet to version 4.26.4, replacing the insecure function with a cryptographically secure alternative.
According to the project, 87.1% of the stolen funds remain frozen within the Qubic network. The remaining 12.9% were transferred to the MEXC exchange, which successfully froze the destination account within an hour of the incident. The core team is currently identifying affected wallets and developing a recovery plan.
The proposed recovery strategy will be subject to a vote by the network's validators, known as Computors. Qubic has not yet announced a timeline for resuming network operations. The project, which utilizes a Useful Proof of Work consensus mechanism, currently holds a market capitalization of approximately $62.6 million.
