Hackers Drain $953,000 from Bloom Trading Bot
The attack lasted under two minutes and compromised 48 wallets from nine users
Security Editor: Fabricio Marcilio 1 min read
Hackers stole nearly one million dollars from wallets linked to the Bloom trading bot. The attack took place over a 94-second window and affected 48 wallets belonging to nine investors. The company behind the service has promised to fully reimburse all affected users.
Blockchain analysis data shows that the Solana transfers were signed using the wallets' private keys. Bloom stated that the incident stemmed from a remote code execution vulnerability in a third-party module. The company denied that user private keys were accessed or compromised directly.
This case highlights the risks associated with using trading bots on Telegram. These tools store private keys to execute orders on behalf of users. Five of the affected wallets had been inactive in the system since the first half of 2025.
Incidents involving trading bots have a history in the crypto sector. In September 2024, the Banana Gun platform recorded losses of 3 million dollars. Previously, users of the Maestro and Unibot bots also suffered combined losses of 1.1 million dollars due to flaws in routing contracts.
Spotted an error? Write to suporte@criptoico.com.br.
More in Security
-
Zcash Group Asks SEC for Data Privacy in Wallet Records
Proposal seeks to allow fundraising verification without exposing the full financial history of token issuers
Security
-
BTCPay Server Patches API Key Vulnerability
Update restricts excessive permissions though the official release is pending
Security
-
Electrum Wallet Flaw Allows Bitcoin Theft During Transactions
Malicious servers tricked users trying to boost pending payments with higher fees
Security