BloomTrading, a cryptocurrency trading bot used by Solana traders, has promised to repay users after nearly $1 million in SOL was drained from wallets linked to its platform. In an October 26 statement, the company said it would fully compensate nine affected wallets by sending replacement funds to new addresses chosen by the wallet owners.
Blockchain monitoring identified approximately 9,408 SOL sent from 49 suspected victim wallets, worth roughly $954,000 at the time. The largest single loss was 1,636 SOL, valued at about $166,000. Multiple traders reported unauthorized withdrawals from wallets connected to the automated trading service.
Investigation and Root Cause
BloomTrading said it is actively investigating the root cause, including whether a third-party service provider was compromised. The company has not yet identified a confirmed vulnerability or attributed the incident to a specific outside attacker.
Several complaints involved wallets whose private keys had been imported into the trading bot. Investigators have not confirmed whether those keys were exposed. Some users reported that their USDC balances remained intact while their SOL disappeared, though this pattern has not been verified across all affected wallets.
Outstanding Questions
BloomTrading has not shared a payment schedule, disclosed the total amount it expects to refund, or explained how it will verify claims. The company's count of nine affected wallets also differs from the 49 suspected victims identified by blockchain monitoring.
The company rejected suggestions for a community relief fund, stating it would cover the losses directly. Users whose private keys may have been exposed were advised to move remaining assets to wallets with entirely new keys, as revoking app permissions alone cannot secure a compromised private key.
