Qubic Halts Network After $1.3 Million Wallet Drain

HACK OR EXPLOITQubic Halts Network After$1.3 Million Wallet Drain65IMPORTANCEQUIET11NEWS MEDIA14PIECESOct 18, 2026 15:10blockboard.net

Published Updated 13 new reports since it was first published

Qubic paused its network after a wallet exploit that affected 1,404 accounts and involved about 2.94 trillion QU. The project later restarted the blockchain, opened a claims process, and said most of the stolen funds were still onchain or frozen at MEXC.

What this rests on

Claim by claim, with its source
✓
Most of the drained funds remained onchain, while the rest were frozen at the crypto exchange MEXC.
✓
Qubic paused network activity after the exploit, and later said it had halted its layer-1 blockchain while the stolen tokens were valued at about $1.4 million.
✓
The token traded lower after the incident, with QUBIC down 5.2% over 24 hours to $0.0000004394.
✓
Qubic said the problem came from weak wallet seed generation, not from a breach of its transaction-validation protocol.
✓
Validators approved a recovery plan and set a claims deadline of May 1, 2027.
✓
Qubic resumed blockchain operations and opened a recovery claims portal for affected wallet holders, with tick processing restarting at 20:00 UTC on October 19.
✓
The attack ran for roughly 104 minutes and targeted 1,404 wallets, with Qubic saying about 2.94 trillion QU was removed.

What it means

Holders across the 1,404 affected accounts cannot move funds until validators resolve the recovery vote, and anyone using the implicated wallet software must regenerate keys under the patched seed logic before trusting a wallet again. MEXC's freeze of the exchange-held portion gives the project a partial backstop, but the 87.1% still sitting onchain needs a validator-approved mechanism to return, meaning victims' access depends on a governance decision, not automatic restitution.

A network that can halt itself and have validators vote on clawing back stolen tokens is making an implicit claim about who really controls the chain, and that claim sits uneasily against any marketing of Qubic as decentralized. Relying on a centralized exchange to freeze the rest of the loot works for victims but underscores that finality on this chain is negotiable when enough validators and a cooperative exchange agree, a trade-off worth naming plainly rather than glossing over.

The validator vote on the recovery plan is the decision that settles whether the frozen 87.1% gets returned to victims and on what terms, since Qubic has confirmed the wallet flaw is patched but left restitution and a full mainnet restart open. Approval would set a precedent for treating a wallet-layer exploit as reversible through onchain governance; rejection or delay would leave the chain halted longer and leave the stolen value in limbo.

Market reaction

QU Qubic it is the asset of the company or protocol in the event from 2 h before to 4 h after the line marks the first headline
published
-0.59 % before publication
-0.67 % after
$0price at publication
12series points

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 17 00:00
The Crypto Guardian scoop
Breaks the event: $1.3M
+1 d 15 h
Oct 18 15:09
The Defiant context
Its angle: immobilized, defiant, story; with quotes
+1 d 15 h
Oct 18 15:18
Crypto Briefing context
Its angle: vulnerabilities, decentralized, necessitating
+2 d 1 h
Oct 19 01:03
Cointelegraph context
Its angle: exchange, prepare, freezes; with quotes
+2 d 5 h
Oct 19 05:06
crypto.news adds
Adds $1.4M, with quotes
+2 d 10 h
Oct 19 10:00
BeInCrypto adds
Sharpens the figure: $1.3M, with quotes
+2 d 12 h
Oct 19 12:00
AMBCrypto echo
No new facts: restitution, unresolved, patched
+2 d 12 h
Oct 19 12:15
Bitcoinist context
Its angle: cryptographically, cryptocurrency, cryptographic; with quotes
+2 d 20 h
Oct 19 20:55
CR CryptoPotato echo
No new facts: coordinated, withdrawals, suspended; with quotes
+3 d 13 h
Oct 20 13:32
The Crypto Guardian echo
No new facts: unauthorized, subsequently, environments; with quotes
+3 d 23 h
Oct 20 23:26
Cointelegraph echo
No new facts: approved
+4 d 4 h
Oct 21 04:59
crypto.news echo
No new facts: operations, vulnerable, replace
+4 d 5 h
Oct 21 05:28
CR Cryptopolitan echo
No new facts: vulnerability, implementing, nevertheless; with quotes
+4 d 15 h
Oct 21 15:50
The Cryptocurrency Post adds
Brings into the story: QU, with quotes

Thefts of a similar size

WhenWhat happenedFigure
6 months ago Ekubo incident $1.4M
10 months ago TMX incident $1.4M
2.1 years ago Caterpillar Coin incident $1.4M
2.3 years ago Minterest · Reentrancy incident $1.4M
2.6 years ago Solareum · Social Account Takeover incident $1.4M

4215 incidents stored · 844 were as large as this one or larger ($1.4M)