1,404 Qubic Wallets Drained as Validators Pull the Network to a Halt

Qubic’s QUBIC token was down 5.2% in the last 24 hours, trading at $0.0000004394 per BeInCrypto Markets data. The selloff followed the draining of 1,404 Qubic wallets and a halt ordered by validators.

Over the same period, the broader crypto market slipped 2.8%, making QUBIC’s loss nearly double the market’s. The sharper move matches the security breach the project revealed on October 18.

Weak Seed Generation Left 1,404 Wallets Exposed

According to Qubic — the AI-driven mining protocol that was at the center of last year’s contested Monero majority claim — the entire drain unfolded in less than two hours. The window opened at 23:42 UTC on October 17 and closed at 01:26 UTC on October 18.

Roughly 2.94 trillion QU, valued at about $1.29 million based on today’s price, was taken by the attacker. Qubic linked the incident to wallet seeds that were produced using insufficient randomness.

Per Qubic, any seed generated before October 18, 2026, in a browser on an iPhone or iPad was vulnerable. Seeds created with Safari on a Mac prior to that date are in the same category.

The Qubic iOS app’s seeds from before July 2025 were also at risk. Version 4.26.4 introduced a fix that prevents any further weak seeds from being produced.

“The issue was in seed generation, not in the Qubic protocol itself,” the team said.

Funds Stay Frozen as QUBIC Holders Await Quorum Decision

A halt was coordinated by Qubic’s Computors at tick 85,371,949. With all transactions suspended, the stolen funds remain locked where they are.

Qubic reported that 87.1% of the stolen funds are still on its network. The remaining 12.9% went to MEXC, which froze the destination account in about an hour. QUBIC deposits and withdrawals have been halted by exchanges as well.

“Any resolution is a decision for the Computor quorum, under the rules of the network,” the post added.

In the meantime, Qubic’s Core team is identifying the accounts involved and putting together proposals for the quorum.

Cysic Bridge Mint Swells October’s Exploit Tally

On October 17, the same day Qubic’s drain started, a separate attack targeted Cysic’s cross-chain bridge. According to the Cysic Foundation, 10 million unauthorized Cysic (CYS) tokens were minted on BNB Smart Chain.

Initial findings indicate that the attacker broke into a database supporting the bridge’s services, then used faulty processing logic to create a forged mint message.

Within roughly 76 minutes, Cysic placed the recipient address on a blacklist, restricting the approximately 2.8 million CYS still held there. The bridge stays shut, and Cysic maintains that no existing user assets were taken.

No damage estimate has been released yet, with the team pointing out that the number of tokens minted is not the same as the eventual dollar loss.

The two incidents join the 11 exploits DefiLlama has already logged in October. Those 11 represent about $6.2 million in disclosed losses. The largest among them was the $3.8 million bridge logic flaw at NEAR Intents on October 1.