News Cryptocurrency
BloomTrading SOL Theft Drains 49 Wallets of $954,000 via Third-Party Exploit
BloomTrading confirmed a $954,000 loss from 49 Solana wallets linked to nine users after an exploit targeted a third-party module on October 26, 2026.
BloomTrading confirmed on October 26, 2026, that approximately 9,408 SOL valued at $954,000 was drained from 49 wallets tied to its Telegram-based trading bot. On-chain monitors identified the funds moving to a suspected drainer address at 7kY8qx8MqJ7Rz2vMhgHETdZLHcTp1oM78AA9dmE9p8BQ, with the largest single transfer reaching 1,636 SOL or about $166,000.
The platform stated that the wallets belonged to nine users, with some individuals maintaining multiple wallets through the service. Losses centered on SOL holdings while some USDC balances reportedly remained untouched. Final figures could rise as additional affected accounts are verified.
BloomTrading SOL Theft Details and Technical Cause
BloomTrading attributed the incident to a complex remote code execution vulnerability in a third-party module. The company emphasized that no private keys were accessed or compromised and that broader wallet exposure had been ruled out. Investigation continues into fund tracing, possible recovery or freezing actions, and attacker identification.
The trading bot provides cross-chain automation primarily through Telegram and manages wallet signing for users. This setup created a single point of failure when the third-party component was exploited. Selective drainage limited to SOL remains under review but has not been linked to any specific motive in public statements.
BloomTrading paused select services as a precaution and directed users to open support tickets via Discord. It advised anyone with remaining assets to transfer them to new wallets generated with fresh private keys. Other wallets connected to the platform were described as unaffected.
Reimbursement Commitment and Market Context
The company pledged full reimbursement of verified losses directly to secure wallets designated by the nine affected users. No separate relief fund was required. BloomTrading noted its operations since 2018 and 2021 in the crypto sector and reaffirmed its commitment to user asset protection.
Similar incidents have highlighted custodial risks in Telegram-based trading tools that handle private keys on behalf of users. BloomTrading has not characterized the event as an exit scam and continues to operate while the investigation proceeds.
Further updates on fund tracing and reimbursement execution are expected in the coming days. Users are encouraged to monitor official BloomTrading channels for verified information and to maintain separate wallet security practices.
Frequently asked questions
How many users were affected by the BloomTrading SOL theft?
BloomTrading stated that the 49 drained wallets belonged to nine users. Multiple wallets per user are possible through the bot interface.
What caused the BloomTrading wallet drain on October 26, 2026?
The platform identified a remote code execution vulnerability in a third-party module. Private keys were not accessed during the attack.
Will BloomTrading reimburse affected users?
BloomTrading pledged 100 percent reimbursement of verified losses directly to secure wallets chosen by the nine users. No relief fund was established.
What should BloomTrading users do after the Solana wallet drain?
Users are advised to move remaining assets to new wallets with fresh private keys and to open support tickets through the official Discord channel for further guidance.
Comments
No comments yet. Be the first!