1,404 crypto wallets drained in 104 minutes. the chain wasn't hacked.

daily ai × crypto news in 5 minutes. no hype, just what matters.

morning. while most of us slept on saturday night, someone emptied 1,404 crypto wallets in under two hours, and the blockchain itself worked perfectly the whole time. that's the big one. also: a cheap open model now beats gpt-5.6 sol on most of its maker's own benchmarks, tether is betting on ai agents that pay their own bills, and etf money kept leaving even as bitcoin bounced back above $82k.

1,404 qubic wallets were drained in 104 minutes. nobody broke the chain. they rebuilt the keys. between 23:42 utc on oct 17 and 01:26 utc on oct 18, an attacker moved about 2.94 trillion qu out of 1,404 wallets on qubic, a layer-1 blockchain. that's roughly $1.4m at the pre-attack price (about $1.3m at monday's). qubic's validators, called computors, then halted the whole network at tick 85,371,949. as of monday it was still stopped. (cointelegraph, bitcoin.com, cryptowatchdesk)

here's the twist: qubic says the flaw was "in seed generation, not in the qubic protocol itself." a qubic wallet is controlled by a 55-letter seed, its version of a recovery phrase. if every letter is truly random, guessing one is hopeless. but the web wallet picked each letter with javascript's Math.random(), which mozilla's own docs say "does not provide cryptographically secure random numbers." with too little entropy, the attacker didn't need to guess the universe of possible seeds, just a much smaller set of predictable ones, and then check which wallets held money. (cryptowatchdesk, mdn, bitcoin.com)

who's exposed, per qubic: seeds created in any browser on an iphone or ipad, or in safari on a mac, before oct 18, 2026, and seeds made in the qubic ios app before july 2025. qubic hasn't explained why apple's browsers in particular produced weak enough seeds; a full technical report is promised "once recovery is settled." the fix, wallet v4.26.4, switched to crypto.getRandomValues(). it protects new seeds only. an old weak seed stays weak, so affected users need a fresh wallet once the chain restarts. (cointelegraph, cryptowatchdesk, crypto adventure)

where the money is: qubic says 87.1% of the stolen qu "never left the qubic network and remain frozen in place," and the other 12.9% went to mexc, which froze the receiving account within about an hour. trenchbook checked the collecting wallets on qubic's public rpc and got the same split: 2.56 trillion qu sitting in eight wallets. frozen is not returned, though. what happens next is a vote for the computor quorum, and there's no restart date yet. (cointelegraph, trenchbook)

the takeaway: halting a chain to stop a thief is a move bitcoin and ethereum aren't built to make, and it's worth asking who gets to press that button. but the real lesson is older and boring: a wallet is only as random as the thing that made it. it's the same failure mode as the public recovery phrases an openai model used to spend someone else's testnet eth in #004. and like the whale in yesterday's case, the useful facts here came from checking the chain, not the headlines. bonus irony: cointelegraph notes qubic's pitch is "useful proof of work," mining that doubles as ai training. the ai part was fine. (cointelegraph)

deepseek's cheap open model now beats gpt-5.6 sol on 9 of 11 benchmarks, by deepseek's own table. deepseek-v4.1-flash-1017 is a "minor update" that jumped from 31.2 to 42.3 on terminal-bench 4.0 and from 74.2 to 77.0 on deepswe. it still trails gpt-5.6 sol on hle and zerobench, and opus 5 leads most rows. the weights (763b parameters, 1m-token context) are on hugging face under the mit license. on deepseek's api it's $0.30 per 1m input tokens and $1.20 per 1m output at peak, half that off-peak. it also opened search and fetch apis at $0.75 per 1,000 calls each. vendor benchmarks, so wait for independent tests, but the price of decent agent work keeps falling. (hugging face, deepseek pricing)

tether backed aisa, a marketplace where ai agents pay per call, in fiat or stablecoins. aisa connects agents to 5,000+ apis, models and tools through one key, with business-set spending limits, and reports 250,000+ agents running and 100m+ transactions processed. tether and hiven joined a seed extension that takes aisa's total funding past $9m; the round size and valuation weren't disclosed, and aisa's usage figures have no stated cutoff. it's another sign stablecoin issuers see ai agents as future customers. (tether, aisa, tokenpost)

etfs bled $549m last week, and ether funds are having their worst month of the year. us spot bitcoin and ether etfs lost $549m net: about $229m from bitcoin funds (a second straight weekly outflow) and $320m from ether funds (a third). spot ether etfs are down roughly $955m in october so far, more than any other month this year. both are still positive for 2026: about +$259m for bitcoin etfs and +$610m for ether. if etf flows are new to you, they're the cleanest daily read on what traditional money is doing. (cointelegraph / sosovalue)

bitcoin bounced back above $82k as china beat estimates. btc recovered from sunday's dip to about $80,700, after nasdaq's 4.5% drop last week, its worst week since june, led by ai-spending and debt worries (coreweave −25%). on monday china reported 4.5% year-on-year gdp growth for q3, ahead of q2's 4.3%, oil eased, and nasdaq 100 futures rose more than 1%. defi tokens led the altcoin bounce. (coindesk, coindesk)

as of ~14:05 kyiv time, oct 19 (coingecko):

bitcoin is back in the middle of last week's range, between thursday's dip under $80k from #003 and the $84k area. more by topic: crypto · ai

defillama: free dashboards for tvl, volumes, yields, stablecoins, fundraises and upcoming token unlocks (like tomorrow's layerzero one) across thousands of protocols and hundreds of chains, plus one free llamaai question a day. pro is $490 a year (~$40.83 a month) for full ai research, custom dashboards and csv exports; the api plan is $250 a month. for anyone who wants the numbers behind a defi headline. (defillama pricing) more picks in the gweiwire tools catalog.

the qubic computor vote. how a halted chain decides who gets the frozen 87.1% back, and how fast it restarts, is a live test of what "decentralized" means under pressure. also this week: tesla and meta earnings, and flash pmis on friday.

that's the wire. check where your seed came from. back tomorrow. — gweiwire

forward this to a friend who still reads crypto twitter for news. new here? subscribe at gweiwire.com.