BloomTrading Says Third-Party Exploit Stole 9,408 SOL From Users

BloomTrading said attackers exploited a vulnerability in a third-party module to steal 9,408 Solana (SOL) from users’ wallets, putting the reported loss at about $947,000. The token figure measures the amount taken; the dollar figure gives its approximate value.

The crypto trading platform said the theft involved multiple wallets and that no private keys were compromised. BloomTrading also said it plans to reimburse affected users in full. That pledge addresses customer losses, but it does not change the reported amount of SOL removed from the wallets.

BloomTrading’s account points to an outside module as the route of the exploit, while saying wallet keys remained safe. In other words, the platform described a software vulnerability and token theft without a reported compromise of private-key credentials. The incident raises concerns about user trust in BloomTrading and its security practices.

The incident puts customer confidence and the platform’s security controls at issue as it responds.