Qubic said an attacker drained approximately 2.94 trillion QU worth $1.3 million from 1,404 wallets between 23:42 UTC on Oct. 17 and 01:26 UTC on Oct. 18, 2026. The exploit exploited weak, predictable 55-character wallet seeds associated with legacy Apple devices, Safari browsers and early iOS applications, rather than a flaw in Qubic’s network code. Validators stopped the chain at tick 85,371,949, Qubic’s unit of network progress. About 87.1% of the stolen tokens remained on the network and was immobilized, while the remaining 12.9% reached MEXC, which froze the receiving account within an hour. Bitget separately suspended QUBIC deposits and withdrawals. Qubic released client version 4.26.4, secured additional exposed funds and said QEARN was unaffected. Compensation depends on a decision by the Computor cluster, while affected users have been told to file police reports. The incident was Qubic’s second 2026 breach involving infrastructure adjacent to its core network, following the August exploitation of the Vottun Bridge. QUBIC was down more than 10% at 10 a.m. Eastern time on Sunday.