A Randomness Bug Just Cost Qubic Users 2.94 Trillion QU
Oct 19, 2026
Qubic confirmed an attacker exploited weak wallet seed randomness to drain 1,404 wallets, though the network managed to freeze most of the stolen funds.
What Happened
Layer 1 network Qubic confirmed that an attacker drained 1,404 wallets of roughly 2.94 trillion QU tokens in a window between 23:42 UTC on October 17 and 01:26 UTC on October 18. The team says the exploit came down to insufficient randomness in how certain wallet seeds were generated, which let the attacker predict and recreate private keys for affected addresses.
The Good News
Qubic says it managed to freeze 87.1% of the stolen funds before they could be fully moved or cashed out, which is a pretty fast response compared to most hacks we cover here. Still, that leaves a meaningful chunk of tokens that got away clean.
This is yet another reminder that wallet seed generation is one of those unglamorous technical details that can make or break a network's security. A flawed random number generator doesn't need a flashy smart contract bug to cause real damage — it just needs time and a motivated attacker.
If you hold QU, keep an eye on official Qubic channels for updates on fund recovery and any wallet migration steps they recommend.