Hackers stole $953,000 from 48 cryptocurrency wallets associated with the Telegram trading bot Bloom. According to data from blockchain analytics firm Bitquery, the entire theft occurred within 94 seconds. The funds were drained through Solana transfers, with each transaction signed by the respective wallet's private key.
Bloom stated that the breach originated from a remote code execution vulnerability located in a third-party module. The company confirmed that no private keys were accessed or compromised during the incident. Bloom has pledged to provide full reimbursement to the nine affected traders.
Bitquery noted that five of the compromised wallets had been inactive on the Bloom platform since the first half of 2025. This incident follows previous security exploits involving Telegram trading bots, including a $3 million loss at Banana Gun in September 2024 and a combined $1.1 million loss at Maestro and Unibot in October 2023.
