Bloom bot hackers loot $953K faster than you can microwave popcorn

What happened

Hackers stole $953,000 in 94 seconds from 48 cryptocurrency wallets belonging to nine traders who used the Telegram trading bot Bloom, according to blockchain analytics company Bitquery. Bloom pledged to reimburse all affected traders in full.

Confirmed

Global impact / market context

Trading bots like Bloom hold users' private keys to trade for them, which means a breach can drain funds even from wallets traders stopped using. This raises security and trust costs for bot operators and could push users toward safer custody setups.

Analyst inference

This is one of several attacks on Telegram trading bot users, following Banana Gun's reported $3 million loss in September 2024 and a combined $1.1 million loss at Maestro and Unibot in October 2023, suggesting repeated weaknesses in bot design.

Analyst inference

What to watch

1. Bloom said the attack came from a remote code execution vulnerability in a third-party module and that no private keys were accessed or compromised. Confirmed
2. Bloom's pledge to reimburse all affected traders in full should be tracked to see whether payouts are completed and how the repayment is funded. Proposed
3. Watch whether five wallets inactive since early 2025 being drained prompts bot users to revoke old wallet permissions, which could reduce fees and trading activity for such bots. Analyst inference

Affected assets

• SOL — Solana

Evidence

• cointelegraph.com