Security· ★★★· bearish·

Solana trading bot Bloom loses 9,408 SOL across 48 wallets

  • —9,408 SOL drained from 48 wallets in 94 seconds on Oct. 26
  • —Nine users affected; 24 wallets had not paid Bloom fees for a month
  • —Bloom denies key leak, cites RCE flaw in an external module
  • —Full reimbursement paid on the day of the incident
Why it matters: The case shows withdrawal-address locks are useless if an attacker gains signing authority over a wallet.
#SOL
Source: Blockmedia
More on this
Security · Oct 28
Bloom loses 9,408 SOL, Myriad hacked via internal wallet permissions
 Security · Oct 26
BloomTrading bot users lose nearly $1M as wallets drained of 9,408 SOL
 Security · Oct 27
Bloom bot hackers drain $953K from user wallets