Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement


5 recorded changes
Want your article here?
Promote with Leviathan News

5 recorded changes
Want your article here?
Promote with Leviathan NewsBloom says the breach stemmed from a Remote Code Execution vulnerability in a third-party module, with no private keys compromised and no broader wallet exposure. The incident affected 49 wallet addresses belonging to 9 users, with losses of roughly 9,408 SOL, about $947,000. Bloom pledges full reimbursement of all stolen funds to secure wallets designated by affected users, and is tracing funds, exploring recovery and freezing options, and seeking to identify the attacker. All Bloom systems are offline as a precaution; users must re-login to Bloom Manager and the Chrome Extension once services resume.
AI summary of the linked source — not editorial content.
first post
Leviathan +8.8 h later
$100.56 → $101.41
BTC +1.0% same window
All times UTC.
48 wallets were drained for $950k all of them have at some point used @BloomTrading weird drain, only targetted certain individuals and only drained SOL so left 6 figs in USDC in the wallets that were luckily saved by the victims
BLOOMTRADING USERS REPORT WALLET DRAINS, $954K MOVED TO SUSPECTED DRAINER ⚠️ A hacker drained 9,408 $SOL from 49 victims in one of its drainer wallet, final number might be much higher. Largest drained amount: 1,636 $SOL (~$166K). Users are urged to disconnect and move funds…
Early on 26 October, an attacker emptied 48 wallets used with Bloom, a Telegram trading bot, and took 9,408 SOL, about $953K. The wallets belong to nine traders. A script tested one wallet per trader, then drained each trader's wallets biggest first, in 94 seconds. It used…
Nearly $1M in SOL reportedly drained from @BloomTrading users here’s what we know: - 9,408 SOL (~$954K) reportedly stolen - Bloom says 9 users were affected and promises full reimbursement - the team temporarily disabled some services - cause still under investigation If you…
BloomTrading Bot users report close to $1 million in wallet drains, with 9,408 SOL traced to a suspected attacker wallet. 👀
Security alert. 🚨 BloomTrading users are reporting drained wallets. Nearly $1M already moved to a suspected drainer, with 9,000+ $SOL taken from dozens of accounts. Disconnect and secure your funds now.
15 more accounts posted about this · 2 Telegram channels (no public link)
Tracked accounts lean long about 97% of the time, so a long-heavy book is normal, not a signal. As of 26 Oct 11:23 UTC.
Alpha, hit rate and sample size exactly as Elfa reports them.
As of 26 Oct 11:10 UTC.
Social-monitoring data, not investment advice Elfa prices Hyperliquid post text from Xas of
Loading related coverage…
Loading comments…

𝕏/@solana ·

𝕏/@coinbureau ·

𝕏/@theghost_alb ·

𝕏/@coinbase ·

𝕏/@solana ·

𝕏/@solana ·

𝕏/@solana ·

𝕏/@coinbureau ·

𝕏/@theghost_alb ·

𝕏/@coinbase ·

𝕏/@solana ·

𝕏/@solana ·
Luxembourg issues Europe's first DLT-native sovereign bond, a €1.7 billion 10-year benchmark
gouvernement.lu
Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement
𝕏/@BloomTrading
Vitalik backs Kimi 3.1 for omitting top-end offensive cyber capabilities from training data
𝕏/@VitalikButerin
US banks are finding unauthorised AI agents inside customer accounts, some acting without user instructions. Morgan Stanley, JPMorgan, BofA and Citi are now restricting agent access.
Axios
Anthropic's Claude Code team says automated review lets most PRs merge with one human approval as revert rate drops 40%
𝕏/@addyosmani
🚀 Love DeFi? Ready to dive in and start earning $SQUID while making an impact?
Restoring your session before loading comments…