Hackers Drain About $953,000 From 48 Bloom Bot Wallets in 94 Seconds as Bloom and Bitquery Disagree on the Cause

Hackers drained about $953,000 in 94 seconds from 48 wallets belonging to nine traders who used Bloom, a Telegram trading bot, according to blockchain analytics firm Bitquery, which reported the incident on Monday. Each drain was a Solana (SOL) transfer signed with the affected wallet’s private key, Bitquery said, and five of the drained wallets had been inactive on the bot since the first half of 2025.

Bloom pledged to reimburse all affected traders in full. In a later statement on Monday, it blamed a remote code execution vulnerability in a third-party module and said “no private keys had been accessed or compromised.” That claim conflicts with Bitquery’s finding that the transfers were signed with the victims’ private keys. Cointelegraph’s report does not resolve the discrepancy, so the root cause remains disputed.

Telegram trading bots hold or manage user wallets, which makes them a recurring target. In September 2024, Banana Gun users lost about $3 million across 11 users. In October 2023, Maestro and Unibot users lost a combined $1.1 million through exploits of their router contracts.

At about $953,000, the loss is in the same range as those earlier bot exploits. The speed of the drain, 48 wallets in roughly a minute and a half, shows how quickly automated attacks can move once a path to the wallets exists. This is news, not investment advice.

Track the market yourself with AiTraderView’s free tools: Crypto Cockpit for charts and 75+ indicators, Crypto Screener to find setups, and Crypto Portfolio to follow your holdings.

Sources:

• Cointelegraph: Bloom bot hackers loot $953K faster than you can microwave popcorn