Bloom Trading Wallet Drain: $947K Lost as Team Promises Full Refunds

Bloom Trading Wallet Drain: 9,408 SOL Stolen as Refunds Are Promised

A trading platform for Solana users has confirmed a serious security breach, and the details changed fast over a single morning. 

The Bloom Trading wallet drain hit 49 addresses that belong to just nine people, with roughly $947,000 stolen. 

The company says no private keys were taken and promises to repay everyone in full. 

Here is a clear, plain-language timeline of what happened, what is confirmed, and what is still unanswered.

How the Day Unfolded

Events moved quickly on 26 October. An on-chain tracking account posted an alert about users reporting wallet drains, saying 9,408 SOL had been moved from 49 victims into one suspected drainer address and warning that the final number could be higher. 

Times below come from the posts’ own dates. The platform’s first reply came about 11 minutes after the alert, and the full explanation followed roughly 4 hours 45 minutes later.

What the Platform Confirmed

In its official security update, the team summarized the incident in one line: no private keys were compromised, unaffected wallets are safe, and every affected user will be fully reimbursed. 

It says the attack used a third-party module through a remote code execution flaw, which in simple terms means an attacker found a way to run their own commands on software they should not control. 

Flaws of this kind are among the most serious in software, because they can let outsiders do things the owner never intended.

• Affected: 49 addresses belonging to 9 users

• Losses: about 9,408 SOL, worth roughly $947,000

• Cause: a weakness in an outside software module

• Refunds: 100% of stolen funds, sent to secure wallets chosen by each user

• Next steps: tracing the funds, exploring freezing options and identifying the attacker

The company also says it has been building software since 2018 and working in crypto since 2021. That description is the team’s own claim.

Wallets Versus Users: Making Sense of the Numbers

Early wording caused confusion. A first reply that morning referred to “9 affected wallets” and said no relief fund would be needed because the team would repay everyone. 

The later statement clarified that the 49 wallets belong to 9 individual users, not 49 separate victims. 

In short, the Bloom Trading wallet drain affects fewer people than the headline of 49 victims suggests, but the losses are still large for nine users. 

The same early reply said the team was still investigating whether a third-party provider might have been compromised, which the final statement answered with the module explanation.

The figures broadly agree across sources. By our own math, the platform’s $947,000 and OnchainLens’s $954,000 both imply a SOL price near $101. 

Spread across nine users, the average loss is about 1,045 SOL, or roughly $105,000 each, while the largest single drained amount reported was 1,636 SOL, about 17% of the total.

Questions Still Open

Several important points remain unexplained, and readers should not assume answers. 

Until they arrive, anyone following the Bloom Trading wallet drain should treat early figures as provisional.

• How funds were moved if no private keys were accessed

• Which third-party module was exploited, and who maintains it

• Where the stolen SOL sits now; points to a public address on Solscan, though we could not open it to check its balance

• Whether the final loss total will change, since the report warned it might be higher

The team has promised transparent updates as findings are confirmed, so a fuller report is likely to follow.

What Users Should Do Now

In a further update, the team recommended moving any remaining funds to fresh wallets with newly generated private keys, as a precaution. 

That advice matches common security practice after any incident involving a third-party tool. 

Scammers often exploit hack news, so fake support accounts are a real risk. Treat any email, direct message, or chat about refunds with suspicion until it is verified. 

Simple steps to consider:

• Create a new wallet and write down its recovery phrase offline

• Move remaining funds from any addresses linked to the platform

• Disconnect or revoke any wallet permissions you no longer need

• Ignore direct messages offering “refunds” or “recovery help”

• Save transaction IDs and screenshots in case they are needed later

• Use only the company’s verified channels for updates

• Share a new address for refunds only after the team contacts you through a verified channel

Conclusion

The Bloom Trading wallet drain is a reminder that even non-key attacks can empty an account when outside software is involved. 

The company’s reimbursement promise is welcome, but it remains a promise until payments are confirmed, and the full explanation is still pending. 

Check official channels, move funds if you are affected, and remember that this article is not financial advice.

Disclaimer

This article is for educational and informational purposes only and is not financial or investment advice. Crypto assets are high risk, their prices can be very volatile, and you can lose some or all of your money. Always do your own research and consider speaking with a licensed financial advisor before making investment decisions.