Qubic Wallet Hack: How 1,404 Wallets Were Emptied in Under 2 Hours

Right, bull runners. At 18 minutes to 1 in the morning, UK time, on the 18th of October, 2026, somebody started opening other people's crypto wallets. By 26 minutes past 2, they'd empty 1,404 wallets, and then they just stopped. So, Qubic holders, someone emptied 1,404 wallets in under 2 hours. And here are the clues.

And if you own Qubic, your seed may be guessable if you made it in an iPhone browser, and I'll show you what. And attention crypto holders, because a thief drained 1,404 wallets, then the whole blockchain froze on purpose. The thief took nearly 3 trillion Qubic coins, which sounds like a heist of the century, until you hear one coin's worth a tiny fraction of a cent. So, in real money, it was about 1.3 million dollars. And here's what makes it a proper mystery.

Nobody got fished, and nobody handed over a password. And there's a link first in the description that I'll come back to once we've cracked this, because for a lot of people with serious money in crypto, it's where someone finally went over their setup with them. I'm Rory, by the way. I've been trading crypto and forex since 2020, and it's given me a full-time income and the freedom to travel the world while I do it. And by the end of this, you'll know how the thief got in without a single password, who the three suspects are, and the three questions I'd ask about every wallet you've ever made.

So, who's a victim? Qubic blockchain started by Sergey Ivancheglo, who goes by "Come from Beyond" online, and co-founded IOTA years back. And if Qubic rings a bell, it's probably because in August 2025, it said it controlled more than half of Monero's mining. And Monero had six of its blocks rewritten. It's run by 676 operators it calls computers.

And here's a detail I love. On the afternoon of the 17th of October, Qubic posts a thread about blockchains being kept safe by machine solving puzzles. About 8 hours later, somebody solved a very different puzzle. One holder posted that he lost about 24 billion Qubic, roughly $10,000 worth, and that it went off to an exchange called MEXC. And he said he'd been their biggest supporter from day one.

So, the first clue is a clock, and have a guess with me here. 1,404 wallets in an hour and 44 minutes. How many seconds is that for each wallet? Have a think. Well, it works out at about 4 and 1/2 seconds each, which is mad because nobody guesses at that speed.

To me, that sounds like a list. Like, whoever this was probably knew which doors to try before they started. And then look where the coins went. About 87% never left the Qubic network at all. The other 13% went to MEXC, and MEXC froze the account that received it within about an hour.

So, either our thief made one daft mistake, or they were in a hurry. And if that exchange account's tied to a real person, that's the first thread anyone investigating will pull. But nobody's been named, and I'm not naming anyone, either. Like, if you're bullish, let's run it.

[music]

Hey, bull runners, welcome back. So, the second clue is the strangest. Qubic put out a list of whose wallets were at risk, and it isn't random at all. It seeds made on an iPhone or an iPad in any browser before the 18th of October. Seeds made on a Mac using Safari, and seeds made in Qubic's own iPhone app before July 2025.

So, quick one. Hang on. What's a seed? Well, it's a secret string that basically is your wallet, and if someone has it, they've got your coins. The The point is it's picked so randomly, nobody could ever guess it.

Qubit said these seeds were made with their own words insufficient randomness. So, think of a padlock that's meant to have billions of combinations, but this one had far fewer and the thief had time to try them all. Computers are rubbish at being random. When a computer picks a random number, it's really doing a sum. And if you know that sum and where it started, you can work out what's coming next.

A security YouTuber called PWN function runs a little script and it tells him his web browser's random numbers before he asked for them.

Let's run the math random again. And if you look closely, it's the same number. If I run it again, bam, it's the same one. I run it again, bam, same one. I run it again, bam, okay, you get the idea.

I can predict random numbers. Pretty cool, right?

Same number every time. That's fine for shuffling your playlist, but it's not fine for making the keys to your money. And that's what gets me because those 1,400 people didn't do anything wrong. They didn't click a dodgy link. They made a wallet the way they were shown on the phone in their pocket and a bit of code they never saw decided whether their lock was real.

And if you've ever lain awake wondering whether you've set something up wrong without knowing it, you're in very good company. That's exactly why I want someone who really knows his stuff to go over my setup. I've done seriously well in crypto in my own right and I came through 2022, but what properly sped things up for me was the team we built at Altcoin Pro. Am I telling you to buy Qubit? No.

There may be better opportunities for your situation. But if you've got real money in crypto, you'd want to know how each of your wallets was made, where everything sits and whether the crypto you already hold could be put to work instead of just sitting there. So, go to the first link in the description and you'll find a short video. Watch that, tap the button under it, fill in the short form and book your free 15-minute call. And someone on the team will go through what you actually hold with you.

And if you're watching on your phone, tap more under this video and you'll find the link first in the list. It's for people holding $50,000 or more in crypto that's just sitting there. And if you're already well set up, they'll tell you that, too. And Black Friday's on the 27th of November when loads of us buy a new phone or a new gadget and set up fresh wallets on it. So, I'd get your call booked before then.

So, back to the case because on the 20th of October, a security firm called SlowMist went through Cubits wallet's code. They said it used a basic random marker called math.random. The kind you just saw get predicted for two jobs at once. One was making people's seeds. The other was stamping little numbers onto wallet messages.

Numbers that anyone watching that traffic could see. Their theory is that if you watch six of those messages in a row, you could work back to where the random marker started, rebuild someone's seed and take their coins. So, it's like a safe that whispers its combination every time someone walks past. But SlowMist were careful. They called it a hypothesized attack, proved it could work in a test and said whether it works for real depends on who can actually see that traffic.

So, that's a theory, not a verdict. And PWM function put the rule really simply.

What these aren't used for is cryptography because pseudo random number generators under conditions are predictable and predictability isn't appreciated in the field of cryptography.

Predictability isn't appreciated in cryptography, which is a very polite way of saying it gets you robbed. From the 30th of July 2026, the same kind of flaw hit Coldcard, a hardware wallet sold to some of the most careful Bitcoin holders on the planet. And Farship, a big tech channel, explained why randomness is everything.

Since the entire security model depends on those words being unguessable, they're chosen by your wallet using a random number generator. A properly generated seed phrase has 128 bits of entropy, which means if you try a billion guesses per second, the universe would end before you got close.

The universe would end before you got close. That's the theory. But Farship said Coldcard's device wasn't using its proper random market at all. It hadn't been for about 5 years.

Instead, it fakes it using the chip serial number and a timer, both of which are deterministic. And so, instead of guessing a seed phrase out of every atom in the universe, you could just loop through all possible combinations of serial numbers and timer values and come away with everyone's keys.

Everyone's keys. And Farship had the attackers taking around a hundred million dollars worth of Bitcoins from more than 7,000 wallets. So, the lesson's simple. The dice matters more than the box they come in. So, who did it?

Nobody's been named, and there are three explanations doing the rounds. Suspect one is the lone cracker. That's Cubics' own version. Weak seeds and attacker who worked out how they were made, and a list run through in under 2 hours. It fits the clock clue and the Apple clue.

Suspect two is the listener. That's slow miss theory. Someone watching the wallet's messages and working the seeds out. It's been shown to work in a test, but nobody's shown that's how this one was done. Suspect three is the inside job.

A few people on X shouted that. One joking it was done to make the price chart look right. I've seen no evidence for that at all, so treat it as pub talk. And then there's the founder. He posted on the 19th of October that it was, his own words, just a problem with the random number generator in a wallet.

And that these things happen in crypto on a daily basis. But if it was your 10 grand, you wouldn't want it put quite like that, would you? But here's the twist that split Qubic holders down the middle. To stop the thief cashing out, the computers halted the whole blockchain. Nothing moved for anyone.

And while everything was frozen, the coins that never left Qubic got moved into a lock box for their owners, which is clever, right? Then on the 20th of October, the network came back on. The computer said yes to the recovery, and Qubic said the first coins had gone back to their owners. And if you were hit, you've got until the 1st of May, 2027 to claim. So that's a happy ending, right?

Well, sort of. A news site called Crypto Noticias said it showed something worse than a kill switch. The 676 validators decided what happened to people's money, and victims were waiting on their permission. And they've got a point, because a chain that can stop to catch a thief can stop for other reasons, too. I'm not saying Qubic did wrong here, because it froze most of the money and is handing it back to its owners.

But whatever coin you hold, it's worth knowing who can press pause on it. So let's split the facts from the gossip. What we know for sure from Qubic itself is 1,404 wallets, an hour and 44 minutes, weak randomness, and a fix. What we don't know is who the thief is, exactly how they found the seeds, and who's behind that MEXC account. Qubic says a full technical report will follow, and until then, everything about the who is a guess, mine included.

And I'm not going to address Qubic up, either, for you. On the 18th of October, one chart watcher had it down about 40% from its October high, at about 45 cents for a million coins. And Qubic told anyone who'd made a wallet on its web wallet before the fix to treat it as insecure, even if nothing was taken. So, plenty of holders have to set up new wallets and move everything across. And there's a second thief in nearly every story like this.

Qubic warned that nobody from Qubic will ever message you at first or ask for your seed because the fake recovery people turned up within hours and they go after folk who've been hurt once. So, what's the lesson? It's not just keep your seed safe because these people did. It's that a seed is only as good as the dice that rolled it. So, for every wallet you've got, ask three things.

What made it? A hardware gadget, an app, a page in a web browser? When did you make it? And has the company behind it ever put a warning out about how its wallets were made? And if the maker tells you to make a new one, you do it from the real app, never from a link somebody sent you.

And a lot of this comes down to knowing who to believe, doesn't it? One of our members, Robert, wrote about exactly that feeling. In a Trustpilot review nobody asked him to write, he says he used to be scared stiff of making any decision in crypto because you couldn't be 100% sure the information in front of him was right. He says that's not a problem for him anymore and that he made back what the program cost him out of his gains in a couple of months. Now, that's Robert's result.

It isn't typical and nobody can promise you the same. But inside you'll find people from all sorts of backgrounds. Plenty of them just protecting what they've built with one-to-one coaching and a weekly call with our research team. So, if you've got 50 grand or more in crypto doing nothing, the free call's waiting behind the first link in the description. So, get it done before Black Friday.

But think back to those 1,404 wallets emptied in the night at 4 and 1/2 seconds each. The thief didn't break the lock. They worked out the lock was never as strong as everyone thought. Most of the money's going home. Nobody's been named.

So, know where your wallets were born. Ignore anyone offering to get your coins back, and find out who can press pause on what you hold. So, who do you think did it? Tell me in the comments. One for the lone cracker, two for the listener, or three for the inside job.

And look, none of this is financial advice, guys. It's just my take after a lot of digging. Crypto carries risk, and what's happened before is no guarantee of what comes next. So, stick with me, subscribe, and there's a new one every day. Thanks for watching, guys.

Keep your head, stack with purpose, and I'll keep you posted.

[music] [music]