Qubic froze its chain on October 19, 2026 after an attacker drained roughly 1,400 wallets that were secured with weak seed phrases, according to a report from Cointelegraph citing the project. Qubic says 87.1% of the stolen funds remain onchain, and that the remainder was frozen at crypto exchange MEXC before it could be withdrawn.
The halt is the drastic end of the response spectrum. Stopping an entire network is not a routine patch; it is what a team does when it decides that letting blocks keep producing is worse than the disruption of freezing everything. In this case the freeze buys time to stop the attacker from moving the stolen balances and to work with the exchange that caught part of the flow.
The flaw was in the keys, not the code
The headline detail is that the wallets were drained because their seed phrases were weak. That is a different failure from a smart-contract exploit or a stolen private key. A seed phrase is the human-readable backup of the entropy behind a wallet. When that entropy is generated properly, there are so many possible seeds that guessing one is computationally hopeless. When it is generated badly, from a small word list, a predictable pattern, a low-entropy random number generator, or a "brain wallet" built from a memorable phrase, the space of possibilities collapses to something an attacker can grind through.
An attacker who can enumerate likely seeds does not need to breach any server. They generate candidate seeds offline, derive the addresses, and check each one against the chain for a balance. Every hit is a wallet they now control as fully as the rightful owner does, because from the network's point of view they hold the correct key. That is why roughly 1,400 wallets could fall to a single campaign: they likely shared the same underlying weakness in how their seeds were produced.
A freeze trades decentralization for recovery
Halting the chain and getting funds frozen at an exchange are both reminders that Qubic has levers a fully decentralized, censorship-resistant network is not supposed to have. A chain that one team can pause is a chain that can protect users in a crisis, and also one that can be stopped for reasons users may not like. The same property that let Qubic freeze the attacker's path is the property that makes the network less neutral than its holders might assume.
The exchange side of the story matters just as much. MEXC freezing the withdrawn portion shows how centralized chokepoints remain the main place stolen crypto gets caught. On-chain funds can be tracked but not clawed back without the private key or network-level intervention; the moment stolen value touches a KYC exchange, that venue can lock it. The 87.1% still onchain is traceable, but traceable is not the same as recovered.
The verified facts stop short of a resolution
The confirmed points are narrow: Qubic froze the chain, about 1,400 wallets with weak seeds were drained, 87.1% of the stolen funds are still onchain, and the rest were frozen at MEXC. The source does not confirm the total dollar value taken, how the weak seeds were generated, whether affected users will be made whole, or when the chain will resume. Treat the 87.1% as a snapshot of where the funds sit, not a promise that owners will get them back.
For anyone who holds their own keys, the practical takeaway is specific. Generate seeds only on a trusted device or hardware wallet that uses a vetted source of randomness, never from a phrase you invented, a website, or an app you cannot verify. The strength of spending from a wallet you control rests entirely on the assumption that nobody can reproduce your seed. When that assumption fails, self-custody offers no protection at all, because the attacker is holding a key the network treats as legitimately yours.
The incident lands in a stretch of heavy scrutiny on crypto security, from exchange audit mandates to hardware supply-chain attacks. This one is a reminder that the weakest link is often not the protocol but the randomness behind a single backup phrase.
Overview
Qubic froze its chain after an attacker drained about 1,400 wallets secured with weak seed phrases, with 87.1% of the stolen funds still onchain and the rest frozen at MEXC. The root cause was low-entropy seed generation, not a contract bug, which let the attacker guess keys and empty the wallets directly. The episode shows both the upside and the cost of a network a single team can pause, and it underlines that self-custody only protects users whose seeds were generated with genuine randomness.
