Bloom bot’s 94-second $953,000 vanishing act comes with a full reimbursement pledge

Hackers stole nearly $1 million from 48 cryptocurrency wallets linked to the Telegram trading bot Bloom in 94 seconds, according to blockchain analytics company Bitquery. The attack affected nine traders who had used the bot, with the drained wallets losing a combined $953,000.

Bitquery said each drain was a Solana (SOL) transfer signed with the affected wallet’s private key. Bloom pledged to reimburse all affected traders in full. In a later statement on Monday, the bot attributed the attack to a remote code execution vulnerability in a third-party module and said no private keys had been accessed or compromised.

Trading bots such as Bloom hold users’ private keys to execute trades on their behalf, potentially leaving security risks after traders stop using them. Five wallets drained in the Bloom attack had been inactive on the bot since the first half of 2025, Bitquery said.

The theft was not the first reported loss involving Telegram trading bot users. In September 2024, Banana Gun reported that 11 users lost about $3 million. In October 2023, users of the Maestro and Unibot trading bots lost a combined $1.1 million through exploits of their router contracts.