Bloom Says It Repaid Users After 9,408 Solana (SOL) Wallet Drain

Bloom says it reimbursed nine users after a trading bot incident drained 9,408 SOL, but transaction records show the refunds delivered less than the amount it announced.

In an Oct. 26 post at 4:37 p.m. ET (20:37 UTC), Bloom said all 9,408 SOL had been returned. Nine refund transactions succeeded between 11:37 a.m. and 4:33 p.m. ET (15:37–20:33 UTC), delivering about 9,399.2 SOL to recipients, roughly 9 SOL below Bloom’s stated total. The drain occurred late Oct. 25 ET (Oct. 26 UTC).

Bloom identified 49 affected wallet addresses belonging to nine users. Transaction records show outflows from 48 wallets over a 94-second span; the difference between the counts has not been explained. The transfers carried signatures from affected wallets, but the records do not establish how the ability to sign them was obtained.

Bloom attributed the drain to a remote code execution flaw in an unnamed third-party module and said no private keys were accessed or compromised. Its refund announcement did not say whether the drained SOL itself had been recovered.

The reimbursement post followed Bloom’s Oct. 26 pledge to repay affected users.