BloomTrading Bot Users Lose $1M in Wallet Drain

Third-Party Compromise Fuels the Drain

BloomTrading, a popular Telegram trading bot, suffered a major security breach on October 26, 2026. Approximately 9,408 SOL vanished from 48 to 49 user wallets. The total loss reached nearly $1 million. The bot has paused key services while investigators trace the attack path.

The incident exposes the vulnerabilities of custodial trading bots. Users entrust their funds to the bot, which controls the private keys. When a third-party component is compromised, attackers can sweep wallets without user consent. This pattern mirrors previous crypto bot hacks.

Investigators suspect a third-party integration was the entry point. The attacker exploited this weak link to access user funds. BloomTrading confirmed the pause in services to contain the damage. Users are advised to monitor their balances closely.

What Does This Mean for Bot Users?

The bot's architecture relies on external APIs and libraries. If any of these are compromised, the entire user base is at risk. This highlights the importance of auditing all dependencies.

The breach serves as a stark warning. Users should diversify their exposure across multiple platforms. Keeping a portion of funds in self-custody reduces risk. Always verify bot permissions before connecting wallets.

Frequently Asked Questions

How much was lost in the BloomTrading hack? Nearly $1 million in value was drained from user wallets. The exact SOL amount was 9,408 SOL.

Has BloomTrading stopped all services? Yes, the bot paused key services on October 26, 2026. This pause allows the team to investigate the compromise.

What should users do now? Check wallet balances immediately. Move remaining funds to a hardware wallet if possible. Avoid re-connecting wallets until the bot confirms the fix.