Hackers drained $953,000 from 48 wallets linked to the Telegram trading bot Bloom in just 94 seconds, according to Bitquery. The attack affected nine traders and involved Solana transfers signed with each wallet’s private key. Bloom pledged to reimburse all affected traders in full and attributed the attack to a remote code execution vulnerability in a third-party module, saying no private keys were accessed or compromised. Five wallets targeted in the attack had been inactive on the bot since the first half of 2025, highlighting the lasting risks associated with bots that retain users’ private keys.
Source: Read the original article


