Bloom Trading Blames Third-Party RCE for $947,000 Wallet Theft

Bloom Trading attributed the theft of about $947,000 in Solana (SOL) to a remote code execution (RCE) vulnerability in a third-party module, saying private keys were not accessed or leaked.

Bloom’s investigation update identified the module flaw as the attack route. The company also said wallets outside the affected group remain safe.

The incident affected nine users across 49 wallet addresses. Bloom put the amount taken at about 9,408 SOL, or roughly $947,000. The company pledged to reimburse the stolen funds in full.

Bloom is tracking the stolen SOL and exploring options to recover or freeze the assets. It has temporarily taken all of its systems offline while it responds to the incident.

Bloom Trading is a cross-chain trading automation platform. After service is restored, users will need to sign in again to Bloom Manager and the Chrome extension. Bloom’s response includes both a full reimbursement pledge and continued efforts to trace the stolen funds.