Bloom, a Telegram-based Solana trading bot, lost approximately 9,408 SOL in an Oct. 26 exploit that hit 49 wallets. The company says no private keys were compromised and promises full reimbursement to the nine affected users.
Bloom, a Telegram-based trading bot that supports Solana and Ethereum Virtual Machine networks, suffered a security breach on Oct. 26, 2026 that drained approximately 9,408 SOL from users' wallets. Bloom's own investigation valued the loss at approximately $947,000, while early blockchain parsing put it closer to $954,000.
Onchain monitors flag the drain
Onchain Lens flagged the suspicious transfers, and Onchain Alert reported that the attacker consolidated the stolen funds into a suspected drainer wallet. The monitoring account identified the largest single drain as 1,636 SOL, worth approximately $166,000.
Early reports suggested the attacker primarily targeted SOL holdings and left some USDC balances untouched.
Nine users, 49 wallets, no stolen keys
Initial reports pointed to 49 separate victims. Bloom's later investigation narrowed that to nine users controlling 49 affected wallet addresses. The company identified a complex remote code execution vulnerability in a third-party software module as the entry point, and said no private keys were compromised.
However, Bloom has not publicly disclosed the precise mechanism that authorized the unauthorized transfers. The company took its systems offline as a precaution and said users will have to log in again to Bloom Manager and the Chrome Extension once services return.
Bloom pledges full reimbursement
Bloom pledged to reimburse the losses. According to Bloom: "Bloom will fully reimburse 100% of the stolen funds" directly to secure wallets that the affected users designate.
The company said it is tracing the stolen cryptocurrency, exploring freezing and recovery options, and trying to identify the attacker. It advised affected customers to move remaining assets into newly generated wallets.
Bloom has not set a reimbursement deadline or said when normal operations will resume.
Source: Bitcoin News
Trading involves risk.
Risk Disclaimer
