Bloom trading bot hack: $953K drained from 48 Solana wallets in 94 seconds, users to be reimbursed

27 Oct 2026

27 Oct 2026, 10:25 UTC+01:00

DeFi TradeReviewed News Desk

Telegram trading bot Bloom has been hit by an attack that drained roughly $953,000 from user wallets in under two minutes. Blockchain analytics firm Bitquery reported on Monday that the funds were taken from 48 wallets belonging to nine traders who had used the bot, with the whole sequence lasting 94 seconds, as reported by Cointelegraph.

How the Bloom attack worked

According to Bitquery, every drain was a Solana (SOL) transfer signed with the affected wallet’s own private key. That detail matters: the attacker did not need to trick users into approving anything, because the transactions were signed as if the owners had sent them.

Bloom gave a different account of the root cause. In a later statement on Monday, the team attributed the incident to a remote code execution vulnerability in a third-party module and said no private keys had been accessed or compromised. Bloom pledged to reimburse all affected traders in full.

One more detail from Bitquery stands out. Five of the drained wallets had not been used on the bot since the first half of 2025, which shows that the risk does not end when a trader simply stops using a bot.

Not the first Telegram bot exploit

Telegram trading bots have been a repeat target. In September 2024, Banana Gun reported that 11 users lost about $3 million. In October 2023, users of Maestro and Unibot lost a combined $1.1 million through exploits of the bots’ router contracts.

What it means for traders

Bots like Bloom work by holding users’ private keys so they can trade on their behalf. That is convenient for fast memecoin trading, but it means the bot’s software and its dependencies become part of your security. A few practical steps follow from this incident:

• Move funds out of wallets created inside bots you no longer use, and treat those wallets as exposed.
• Keep only the amount you are actively trading in a bot wallet.
• Hold longer-term funds in self-custody you control or on a regulated exchange with strong security practices.

If you are choosing where to keep trading capital, our crypto exchange comparison ranks platforms on security, fees and features, and our reviews of BingX and OKX cover how each handles account protection. You can also see how we test exchanges.

This article is for information only and is not financial advice.

Related reviews

• Bingx review
• Okx review

Sources

• Cointelegraph: Bloom bot hackers loot $953K faster than you can microwave popcorn

News is for information only and is not financial advice. More crypto news