BloomTrading Users to Receive Reimbursement After Hack
The platform pledges to restore funds to nine identified users after an exploit drained 9,408 Solana from 49 total wallets.
Updated on Oct. 26, 2026 in Cybersecurity
Live Poll
Do you trust cryptocurrency trading platforms to keep your digital assets secure?
BloomTrading has pledged full reimbursement to nine users after a security exploit drained approximately 9,408 Solana from 49 wallets. The trading platform, which operates via Telegram, is currently reviewing activity to identify further impacted accounts.
Why it matters
This incident highlights the security risks inherent in trading platforms that integrate directly with messaging apps like Telegram, where transaction execution lacks the oversight of traditional exchange interfaces.
The incident involved an estimated 9,408 Solana, valued at approximately $954,000, with the largest single unauthorized transfer totaling 1,636 Solana, or $166,000. These figures are being measured against the total activity across BloomTrading's Telegram-based Solana and EVM network infrastructure.
The players
BloomTrading
A trading platform that enables users to execute cryptocurrency transactions on Solana and EVM networks through Telegram bots.
The details
BloomTrading facilitates cryptocurrency trades by interfacing directly with Solana and EVM — Ethereum Virtual Machine, a software environment that executes smart contracts — networks via Telegram bot commands. The current incident stems from a suspected drainer wallet, a malicious script designed to automatically empty cryptocurrency wallets once access is gained. The company has temporarily disabled certain services while it investigates how the drainer accessed the private keys or permissions of the 49 affected wallets.
Timeline
October 26, 2026: BloomTrading identified nine users eligible for full reimbursement.
The Tech Race
This breach follows a pattern established by the 2023 Unibot exploit, where decentralized trading bots became primary targets for attackers exploiting API-based access. It marks a continued vulnerability in the push for high-speed, messenger-integrated DeFi tools.
Affected users are required to open support tickets via Discord to verify their accounts for the pledged reimbursement. BloomTrading has temporarily disabled specific services, and users should monitor their wallets for any unauthorized outgoing transactions.
The takeaway
The security of Telegram-based trading depends entirely on the robust isolation of API keys from the broader messaging environment. Users should watch for BloomTrading's forthcoming technical post-mortem to confirm how the company intends to secure these integration points against future drainer attacks.
Further reading
For broader analysis on platform security risks, visit Cybersecurity.
Source note: This article includes information reported by TokenPost.
Live Poll
Do you trust cryptocurrency trading platforms to keep your digital assets secure?
