BloomTrading Telegram Bot Users Lose Approximately $954,000 in Solana Wallet Drain

What happened
An unauthorized actor drained 9,408 SOL valued at approximately $954,000 across 48 wallets belonging to nine BloomTrading users in 94 seconds on October 26, 2026.
The Context
- Custodial bots present architectural single points of failure, as platforms like BloomTrading generate and store user private keys server-side to facilitate rapid automated trades on networks like Solana.
- The exploit was highly targeted, siphoning native SOL via the wallets' own private keys while leaving USDC intact, hitting active accounts as well as dormant wallets unused since mid-2025.
- Remediation is currently private and self-funded, with BloomTrading pausing select platform modules, investigating potential third-party code execution flaws, and pledging direct reimbursements to new user wallets.
The Number
— the operational window it took for an automated exploit to clear 48 distinct wallets, proving that custodial execution layers leave zero reaction time when core infrastructure is compromised.
Takeaway
Expect trading bot platforms to face mounting pressure to shift from custodial key management to non-custodial delegated signing architectures.
Covers blockchain, cryptocurrency news, project analysis, and market insights.
"Cointelegraph is a leading crypto-focused media outlet known for timely news, analysis, and educational content related to blockchain and digital assets."
— A47 Editor
Bloom bot hackers loot $953K faster than you can microwave popcorn
Bloom pledged to reimburse nine traders after $953,000 was drained from 48 wallets linked to its trading bot, with the company stating that no private keys were accessed or compromised.
Covers Bitcoin plus altcoin news, market updates, and educational resources.
"Bitcoin.com provides news, market data, and guides focused on Bitcoin and the wider crypto industry."
— A47 Editor
Solana Trading Bot Hacked for Nearly $1M, 49 Wallets Drained
A Solana-based trading bot operated under the name Bloom Trading was hacked, with approximately 9,408 SOL, valued at about $954,000 to nearly $1 million, drained from 49 suspected victim wallets, according to a Bitcoin.com report. The cause of the dr...
Real-time updates, analysis, and reports on the blockchain and cryptocurrency sectors.
"Crypto News delivers real-time updates, analysis, and reports on the blockchain and cryptocurrency sectors."
— A47 Editor
BloomTrading promises refunds after $954K Solana wallet drain
BloomTrading has promised full refunds after a Solana wallet drain of roughly $954,000 affected nine users, with the company attributing the incident to a third-party remote code execution flaw and ruling out exposure of private keys. Coverage from B...
Research, news, and analysis on blockchain startups, DeFi, and regulations.
"Crypto Briefing provides research, news, and analysis on blockchain startups, DeFi, and crypto regulations with investor-focused coverage."
— A47 Editor
BloomTrading bot users lose nearly $1M as wallets get drained
BloomTrading, a custodial trading bot platform, faced reports that nearly $1 million in user funds were drained from wallets, according to Crypto Briefing. The incident has prompted attention to the security risks inherent in custodial trading bots a...