Between 23:42 UTC Saturday and 01:26 UTC Sunday, an attacker emptied 1,404 Qubic wallets of about 2.94 trillion QU, roughly $1.3 million, according to Bitcoin.com News. The chain itself held up. The weakness sat in how some wallets were created: 55-character seeds generated with insufficient randomness, which let the attacker rebuild a smaller set of likely seeds and check them for balances. Affected seeds came from browsers on iPhones and iPads, Safari on Macs, and older versions of Qubic's iOS app. Developers say version 4.26.4 fixes the flaw, and they moved some exposed funds out of reach before the attacker found them. Qubic's validators, known as Computors, stopped transactions at tick 85,371,949 early Sunday, leaving about 87.1% of the stolen QU stuck on the network. That power cuts both ways, since a quorum able to freeze the chain to protect users can freeze it for any reason. The other 12.9% reached MEXC, which froze the receiving account, and Bitget paused QUBIC deposits and withdrawals for maintenance. QEARN stakes were reportedly untouched, and the token was down more than 10% at 10 a.m. Eastern on Sunday. Qubic, founded by early NXT and IOTA developer Sergey Ivancheglo, drew controversy in 2025 for claiming majority control of Monero's mining hashrate. Whether victims are repaid now depends on a vote of the Computor quorum.