Key points
- Qubic reports 1,404 drained wallets; its warning identifies specific seed-creation environments and dates.
- A seed-generation patch, transfer halt and recovery decision are different milestones. MEXC confirms deposits and withdrawals were suspended.
PANTHER JOURNAL #034
The wallet may still look familiar. The important question is how its secret was born.
The Qubic wallet hack is a warning about seed creation, not just seed storage. In an October 18 official update, Qubic reported 1,404 drained wallets and around 2.94 trillion QU taken during October 17–18. For holders of Qubic ($QUBIC), the immediate checklist starts with the device, browser and date used to create the seed.
Qubic wallet hack: check the creation environment
Qubic’s affected-seed warning identifies three groups:
- Any browser on iPhone or iPad: seeds created before October 18, 2026.
- Safari on Mac: seeds created before October 18, 2026.
- Qubic’s iOS app: seeds created before July 2025.
That is a creation-history test, not a test of the device you use today. Importing an old seed into a different wallet does not create a new secret. Likewise, keeping a backup offline does not retroactively make the original generation process unpredictable.
Qubic attributes the theft to insufficient randomness in some seeds, rather than a failure of its transaction protocol. That distinction does not make the wallet losses hypothetical: it identifies a different layer of the security system.
A holder does not need to reverse-engineer the exploit to take the warning seriously. Record where and when the seed was generated without posting the seed itself. The list is not evidence that every Apple device or every cryptocurrency wallet is compromised.
Containment is not a completed recovery
The project reported a network halt at tick 85,371,949. Its fund-location update says 87.1% remained on Qubic, while 12.9% reached a MEXC account that the exchange froze. Those are project-reported containment figures, not independently reconciled recovery payments.
MEXC separately confirms that QUBIC deposits and withdrawals were suspended at the team’s request. That notice does not itself verify the frozen-account balance or promise reimbursement.
Cointelegraph’s October 19 reporting corroborates the incident and pending recovery process. The Defiant also reports the halt. Dollar headlines vary with token-price snapshots; this brief uses the project’s token count rather than presenting a market valuation as realized proceeds.
Stopping transfers can preserve options for recovery, but it also interrupts ordinary users’ ability to move assets. The same intervention therefore creates a second reader question: what conditions will allow normal access to resume?
A patched generator does not replace an old seed
Qubic says version 4.26.4 corrects seed generation. That is a claim about generating secrets going forward. Updating software and replacing an existing secret are different operations; reopening a network and restoring a victim’s balance are different outcomes too.
Its resolution update places decisions with the Computor quorum. The reviewed announcement does not establish a completed compensation plan or a restart date. Before acting, check for newer official instructions rather than assuming the latest patch settles every part of the incident.
Affected users are asked to report losses to police or cybercrime authorities, with wallet ID, amount and explorer transaction link. Keep that evidence separate from secret credentials. Qubic warns against unsolicited messages and paid recovery offers.
Panther’s recovery-phrase exposure guide explains why possession of a wallet secret matters. Never disclose one to prove ownership to a stranger.
Panther Takeaway
Secure storage cannot rescue a predictable secret. Check the origin of your seed, then follow authenticated remediation instructions. Treat containment, a software fix and reimbursement as three separate milestones—not one reassuring headline.
Sources and verification
Primary evidence: Qubic’s October 18 incident thread and linked follow-ups; MEXC’s suspension notice. Independent reporting: Cointelegraph, October 19, and The Defiant. Panther read the original thread and cross-checked the exchange notice. Wallet totals, fund-location percentages and the stated cause remain attributed to Qubic; Panther has not independently reconstructed all affected addresses or audited the patch. Status reflects the latest official incident update available during this review, not a guarantee that no subsequent decision will follow.
Responses
No responses yet. Start the conversation.
Panther Journal — The intelligence brief
Stay ahead of the story.
Free. New investigations delivered when published. Unsubscribe anytime.
