BloomTrading users report wallet drains totaling $954K across 49 victims via suspected drainer wallet.
Security & Exploits ·
BloomTrading users have reported a coordinated wallet-draining attack affecting at least 49 victims, with approximately 9,408 SOL siphoned to a suspected drainer wallet. The aggregate loss totals around $954K, though investigators note the final tally could be substantially higher. A single victim lost 1,636 SOL—roughly $166K—marking the largest individual drain recorded so far.
The attack appears to have exploited access to user wallets, likely through compromised trading bot keys or permissions. Security researchers have flagged the address 7kY8qx8MqJ7Rz2vMhgHETdZLHcTp1oM78AA9dmE9p8BQ as the suspected recipient of stolen funds. Observers note that entrusting private keys or signing authority to automated trading tools represents a persistent vulnerability in the ecosystem.
The community has been advised to immediately revoke permissions, disconnect from potentially compromised services, and transfer holdings to newly generated wallets. It remains unclear whether BloomTrading itself was compromised or whether the breach resulted from individual user mismanagement of bot credentials. The total scope of affected accounts and any response from the platform have not yet been disclosed.