Bloom bot wallets drained of 9,408 SOL in under two minutes
Bloom blamed a third-party module and said the nine affected users were refunded the same day.
· Effective · Verified 2026-11-03 via reputable press (2+ outlets)
Effective Oct 26, 2026: Bloom bot wallets drained of 9,408 SOL in under two minutes. Affects: Users with wallets created through Bloom's Solana bot, including some that had not traded recently. Source: cointelegraph.com, verified Nov 3, 2026. If this rules Bloom out, our top-listed alternative is Banana Gun (1% round trip; code dexsheet).
On 26 October 2026, 48 wallets linked to the Bloom Telegram trading bot were emptied of 9,408 SOL, about $950K, between 01:03 and 01:04 UTC, according to Bitquery's reconstruction reported by Blockonomi and Parameter. Bloom said private keys were not accessed and attributed the drain to a remote-code-execution flaw in a third-party module.
Each transfer was a plain SOL transfer signed only by the affected wallet's own key. Bitquery found that 24 of the 48 wallets had paid no Bloom trading fee in the prior 30 days, and grouped them into nine users.
Bloom said later on 26 October that all nine affected users were fully refunded. The cause has not been independently confirmed, and investigators had not established whether keys were copied or a signing path was misused. Bloom's docs describe a withdrawal-address lock, which would not stop a transfer signed with a copied key.
Who this affects
Users with wallets created through Bloom's Solana bot, including some that had not traded recently.
Bloom at a glance
Bloom is a multi-chain memecoin trading suite made of Telegram bots (separate Solana and EVM bots), a web dashboard called Bloom Manager, and a Chrome extension that adds one-click trading to terminals such as Axiom and GMGN. It charges 1% per buy and sell, or 0.9% for users who join through a referral link.
Full Bloom sheet · 2% round trip
More from the newsroom
Sources
Last checked . Fees and terms change often; the venue's own page wins if it disagrees with ours.
- Cointelegraph: Bloom bot hackers loot $953K — checked 2026-11-03
- Blockonomi: Hackers drain 9,408 SOL from Bloom trading bot wallets — checked 2026-11-03
- Parameter: Bloom trading bot suffers 9,408 SOL hack, all users refunded — checked 2026-11-03
About DexSheet
DexSheet is an independent fee sheet for on-chain trading. It tracks the fees, custody, backers, incidents and availability of 96 crypto trading venues, with a dated source for every number. Every newsroom entry is checked against the venue's own announcement, docs or terms before it is published. Data: fees.json (CC BY 4.0) · RSS.