BloomTrading promises full reimbursement after exploit drains $947,000 in SOL
Telegram trading platform BloomTrading confirmed that an attacker drained roughly 9,408 SOL from 49 user wallets via a third-party module vulnerability, pledging to fully reimburse all affected users.
Telegram-based trading bot platform BloomTrading announced it will fully refund users after an exploit drained roughly 9,408 SOL, worth approximately $947,000, across 49 wallet addresses. The platform clarified that the theft affected nine users and stated that unaffected wallets remain safe.[2]
According to an official statement released by BloomTrading, attackers exploited a third-party module through a remote code execution vulnerability to carry out the unauthorized transfers. The team maintained that no private keys were accessed or compromised, and confirmed it is working to trace the stolen funds, explore asset freezing options, and identify the perpetrator.[2]
The statement followed mounting panic across the crypto community, where early reports initially raised suspicions of an insider backdoor trojan or exit scam. Coin Bureau reported that the platform had paused several services while investigating, noting that the largest individual loss reached 1,636 SOL, valued at around $166,000. Another user reported a loss of over 1,039 SOL, worth approximately $100,000, while several victims noted that assets like USDC remained untouched in their drained wallets.[1][3]
Key facts
- BloomTrading reported that an attacker exploited a third-party module using a remote code execution vulnerability, stealing roughly 9,408 SOL worth $947,000.
- The exploit impacted 49 wallet addresses belonging to 9 users.
- BloomTrading pledged to reimburse 100% of the stolen funds directly to secure wallets designated by affected users.
- BloomTrading stated that no private keys were accessed or compromised and that unaffected wallets remain safe.
- Before BloomTrading's statement, social media reports and Coin Bureau flagged the incident as a suspected exit scam, tracking 9,408 SOL to an attacker address.
- Reported individual losses included one wallet drained of 1,636 SOL (roughly $166,000) and another losing over 1,039 SOL ($100,000).
- USDC holdings reportedly remained untouched in several of the drained wallets.
Sources · 3 sources
- CB
Coin Bureau@coinbureauPost on X ·
⚠️ ALERT: BloomTrading Bot users report nearly $1 MILLION in wallet drains, with 9,408 SOL traced to a suspected attacker wallet. Reports identify roughly 49 victims, with the largest individual loss reaching 1,636 SOL, worth about $166,000. Total losses could be higher as more affected wallets emerge. Victims report losses from wallets whose private keys were imported into the trading bot, while USDC reportedly remained untouched in several cases. BloomTrading’s team is reportedly investigating and has paused some services. Users are being urged to move remaining assets to fresh wallets, disconnecting alone won’t protect funds if a private key has been compromised.
Open source - SO
SolanaFloor@SolanaFloorPost on X ·
🚨JUST IN: @BloomTrading says attackers exploited a third party module to remotely execute code, stealing 9,408 $SOL ($947K) from 9 users across 49 wallets. Bloom says no private keys were compromised and will fully reimburse affected users. https://t.co/mWGkLznBzk
Open source - Y❤
yourfriendSOMMI ❤️💛💚💙@yourfriendSOMMIPost on X ·
❤️💛💚💙 BloomTrading has Exit Scammed. Unfortunately, insider scum at BloomTrading have run the backdoor exit trojan to steal everyone's funds. One person lost -$100K. https://t.co/j5ZdUtQYPz
Open source