Is my Qubic wallet safe? Not if its seed was made on an iPhone, iPad or Safari before 18 October
1,404 Qubic wallets were drained overnight through weak seeds. The network is halted, so nothing can move. Here's who is affected, where the QU sits, and whether qubicmap.org's checker is safe to use.
trenchbook.app · Is my Qubic wallet safe? Not if its seed was made on an iPhone, iPad or Safari before 18 October · filed Oct 18, 2026 · trenchbook.app/dispatch/qubic-wallet-drain-safe
Is my Qubic wallet safe? If its seed was created on an iPhone or iPad in any browser, or in Safari on a Mac, before 18 October 2026, or in the Qubic iOS app before July 2025, treat that seed as weak, even if your wallet wasn't drained. That's Qubic's own list, from its incident thread at 8:29 AM ET today. Qubic says the weakness was "in seed generation, not in the Qubic protocol itself", and that seed creation is fixed in version 4.26.4. Seeds made elsewhere aren't on its list.
Should I log in to check? There's no rush, and nothing you do right now can move funds, yours or anyone's. The network has been stopped since the drain: Qubic says computors halted it at tick 85,371,949, and when we asked Qubic's public RPC at 8:37 AM ET today, its latest tick was still 85,371,949. If you want to know whether your wallet was hit, you only need your public address (60 letters), never your seed. When the network restarts, follow Qubic's official instructions on moving funds off an affected seed.
What happened. Between 7:42 PM and 9:26 PM ET on 17 October (23:42 to 01:26 UTC), an attacker emptied 1,404 wallets of about 2.94 trillion QU, in Qubic's words. Qubic says a flaw in seed generation let the attacker work out those seeds; its full technical report is still to come. The community list behind qubicmap.org's checker has the same count and total: 1,404 addresses and 2,939,606,531,944 QU, all swept into seven collecting wallets in that window.
Where the QU is now. We checked each collecting wallet on Qubic's public RPC. Five have never sent anything out and hold 2.07 trillion QU between them. One, XVPY…QXDI, sent 94 billion QU to an eighth wallet, RPJP…AKMD, which hasn't moved it, and still holds 359.6 billion itself. The seventh, TFYI…YVLE, sent 379.04 billion QU (12.9%) in two transfers at 8:38 and 8:49 PM ET to DKYO…HNQG, which passed all of it on within minutes, the way an exchange deposit address does; TFYI still holds 35.7 billion. Together those eight wallets, the seven collectors and RPJP, hold 2.56 trillion QU, 87.1% of what was taken, matching Qubic's figure. Qubic says the 12.9% went to MEXC and that MEXC froze the receiving account within about an hour. We can't see MEXC's side, so the freeze is Qubic's account.
Is qubicmap.org/check safe? From its code, yes for what it asks: your public address. We read the page as served at 8:40 AM ET today. It downloads one fixed file, the list of drained addresses, and compares what you type against it inside your browser. Nothing you type is sent to the site or anyone else; the only other script is Cloudflare's standard bot check. It doesn't ask for a seed, connect a wallet or ask you to sign anything. It's a community page, not Qubic's, and a page can change after we read it, so never paste a seed there or anywhere.
What to do if you were drained. Qubic asks victims to file a police or cybercrime report with the wallet ID, the amount and the transaction link from explorer.qubic.org, because formal reports help exchanges keep funds frozen. Any return of funds is up to a vote of the computor quorum; Qubic says a community poll is open on Discord.
Watch for recovery scams. Qubic says nobody from its team will message you first, ask for your seed or offer paid recovery. Anyone who does, after a drain like this, is the next scam.
- Who ran the drain.
- Whether the computor quorum will move or return the frozen QU, and when the network restarts.
- Exactly how weak the affected seeds were; Qubic says a full technical report will follow.
The claims, checked
who said it, and what the evidence shows“An attacker drained 1,404 Qubic wallets, totalling around 2.94 trillion QU.”
The community list of drained addresses has 1,404 entries totalling 2,939,606,531,944 QU, and the seven collecting wallets received that same total.
“Computors coordinated a protective halt of the network at tick 85,371,949.”
Qubic's public RPC still reported tick 85,371,949 at 8:37 AM ET on 18 October.
“87.1% of the drained funds never left the Qubic network… The remaining 12.9% was sent to MEXC.”
The seven collecting wallets and RPJP…AKMD, which got 94 billion from one of them, hold 2.56 trillion QU between them; five collectors never sent anything. 379.04 billion went from TFYI…YVLE to DKYO…HNQG and on within minutes. That it's MEXC's, and that MEXC froze it, is Qubic's account.
“The search runs in your browser: nothing you type is sent anywhere.”
The page's only request is a fixed list file, fetched without your input; the comparison happens in the page's own script. Read 18 October, 8:40 AM ET.
Sources
Read next
3 chains in 69 secondsBRIEFING3 chains in 69 secondsThe $4M frogman drain: three chains emptied in 69 seconds, and the SOL went into a privacy pool
13 rule changesBRIEFING13 rule changesHooki's first day: 13 rule changes on $HOOKI, nearly all about selling
X Money backersBRIEFINGX Money backersStrangers are paying Daniel Berk's Cybertruck fund on X Money. A coin he didn't launch pays them backWe check new claim sites, airdrops and launches as they trend. Follow @trenchbookapp for the next one.
Know more, or named here and want to reply? DM @trenchbookapp on X. A wallet's owner who proves control of it gets their reply printed.