Qubic network halted after exploit drains 2.94 trillion QU from 1,404 wallets
Security & Exploits ·
The Layer 1 network suspended operations after an attacker exploited weak seed generation to compromise user wallets and siphon off billions in QU tokens.
According to a statement posted on X, the exploit affected 1,404 wallets, with the attacker draining a total of 2.94 trillion QU tokens from the compromised accounts. The breach stemmed from a vulnerability in how seeds were generated for the affected wallets, allowing the attacker to derive private keys and move funds without authorization from the holders.
Seed generation underpins the basic security model described in explainers on how crypto wallets function: a wallet does not store coins directly but manages the cryptographic keys that prove ownership and authorize transactions. When the process that creates those keys is weak or predictable, as appears to be the case here, an attacker can reconstruct a user's private key independently and gain full control over the associated address, bypassing the need to compromise any individual device or credential. A rundown of wallet mechanics and the risks tied to key management is laid out in Telem's wallet explainer.
In response to the drain, Qubic halted the network, a step that limits further movement of funds while the team assesses the scope of the compromise. Separate reporting on the cluster notes that 87.1% of the stolen funds have since been frozen on-chain, suggesting that a large majority of the 2.94 trillion QU taken has been contained even though the network itself was not able to prevent the initial exploit. Additional detail on the freeze and the broader fallout has been tracked by wublockchain.xyz.
The episode adds to a string of wallet-security incidents across the industry, as infrastructure providers race to roll out more resilient key-management designs such as MPC and account abstraction. It remains unresolved how the remaining unfrozen portion of the stolen QU will be handled, whether the 1,404 affected wallets will be made whole, and what specific flaw in the seed-generation process allowed the attacker to predict or derive private keys at this scale. Qubic has not detailed a timeline for restoring full network operations.