Bloom Trading Bot Hack Drains $953K From 48 Wallets
Hackers drained $953,000 from 48 wallets linked to the Telegram trading bot Bloom in just 94 seconds, according to blockchain analytics firm Bitquery. The wallets belonged to nine traders, and the stolen funds were transferred on Solana in transactions signed with the affected wallets’ private keys.
Bloom said a remote code execution vulnerability in a third-party module enabled the attack. The platform said no private keys were accessed or compromised and pledged to reimburse all affected traders in full. Bitquery noted that five drained wallets had not used Bloom since the first half of 2025, highlighting security risks that can persist after traders stop using a bot.
The Bloom trading bot incident follows earlier losses involving Telegram-based services: Banana Gun reported about $3 million stolen from 11 users in September 2024, while exploits affecting Maestro and Unibot router contracts caused a combined $1.1 million loss in October 2023.
Neutral
The Bloom trading bot hack is a serious security incident for affected users, but the reported loss is limited to $953,000 across 48 wallets and Bloom has pledged full reimbursement. The platform also says the vulnerability was in a third-party module and that private keys were not accessed or compromised. These details may limit immediate concerns about wider wallet security, although they do not remove the risk associated with trading bots that manage users’ keys.
In the short term, the incident could prompt Bloom users to withdraw funds, pause bot activity or review wallet permissions. Similar Telegram bot exploits, including the Banana Gun losses in 2024 and the Maestro and Unibot incidents in 2023, show that repeated security failures can weaken confidence in this sector. However, this report does not indicate a broader Solana network compromise or a threat to the wider crypto market, so a lasting effect on major token prices or market stability appears limited. Longer term, traders may demand stronger audits, clearer disclosures and safer key-management practices from bot providers. Overall, the news is neutral for the broader market, with negative implications concentrated in trading-bot security and user confidence.