Security risks tied to crypto trading bots are back in focus after wallets linked to Telegram bot Bloom lose nearly $1 million in less than two minutes. The incident affects 48 Solana wallets across nine traders, including several accounts that had not used the bot since the first half of 2025.
Highlights
- A Bloom bot exploit drained $953,000 from 48 wallets belonging to nine traders in 94 seconds via Solana transfers signed by private keys.
- Bloom announced it will fully reimburse all affected traders, attributing the attack to a remote code execution vulnerability in a third-party module, with no private keys compromised.
- The Bloom incident follows Telegram trading bot losses, including Banana Gun's $3 million exploit in September 2024 and Maestro/Unibot's $1.1 million loss in October 2023.
Attack details and reimbursement plan
As reported by Cointelegraph, citing Bitquery, the attack drains $953,000 in 94 seconds from 48 cryptocurrency wallets belonging to nine traders who had used the Bloom bot. The blockchain analytics company says each wallet drain is a Solana transfer signed with the affected wallet's private key.Bloom says it will reimburse all affected traders in full. In a later Monday statement, the company attributes the attack to a remote code execution vulnerability in a third-party module and says no private keys have been accessed or compromised.
Telegram bot security risks intensify
Trading bots such as Bloom hold users' private keys so they can execute trades on users' behalf, a structure that can leave lingering security risks even after traders stop using the service. Bitquery says five of the wallets drained in the Bloom incident have been inactive on the bot since the first half of 2025.The incident adds to a series of losses involving Telegram trading bots. In September 2024, Banana Gun reports that 11 users lose about $3 million, while in October 2023 users of Maestro and Unibot lose a combined $1.1 million in exploits targeting their router contracts.
Our earlier article on surging cybersecurity funding highlighted that investor appetite stayed strong as larger late-stage rounds lifted total capital despite fewer deals. We noted that AI-driven and identity-security companies captured much of the funding, while big-ticket acquisitions underscored ongoing consolidation as businesses prioritize protection against evolving digital threats.
Latest Solana News
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
