BloomTrading Promises to Compensate Losses After Theft of Approximately $954,000 in SOL

BloomTrading announced its intention to compensate nine wallets after reports of nearly $1 million in Solana being withdrawn from users' trading bot wallets. According to blockchain investigators, about 9,408 SOL, worth approximately $954,000, were transferred to an address suspected of receiving stolen cryptocurrency from 49 alleged victims. The largest single loss was 1,636 SOL, around $166,000 at the time of the incident.

On October 26, BloomTrading stated that it would fully reimburse the funds to the nine affected wallets by transferring them to new addresses provided by the owners. The statement followed complaints from Solana traders who discovered unauthorized withdrawals from wallets linked to the platform. The monitoring account Onchain Lens estimated transfers of 9,408 SOL from 49 alleged victims; the estimate covers transactions associated with one suspicious address, so the total damage could be higher. Trader Domy reported that three of his wallets were emptied of approximately 800 SOL and mentioned a separate transfer of about $64,000. Another trader, Pikalosi, urged not to blame the victims for their trading strategies.

BloomTrading rejected the idea that users need to organize a public relief fund: the company intends to cover the losses itself. "We are still actively investigating the root cause," the statement said; the investigation includes the possibility of a third-party service provider compromise. The commitment does not mean that compensation has already reached users: the company has not disclosed the payment schedule, total amount, or method of claim verification. Its figure of nine wallets differs from the 49 alleged victims from blockchain monitoring, and the company did not explain this discrepancy.

Some complaints concerned wallets whose private keys were reportedly imported into the trading bot, although investigators have not determined whether the keys were exposed. If a private key is obtained by an outsider, disconnecting the wallet from the application will not prevent the remaining assets from being withdrawn. Some users reported that USDC balances remained untouched, while SOL disappeared; this observation is not confirmed for all wallets.

BloomTrading has not identified a confirmed vulnerability or attributed the withdrawals to an external attacker. Users whose keys may have been exposed should transfer remaining assets to wallets with entirely new keys: revoking application permissions alone will not invalidate a compromised key. The company has not yet published a completed investigation or technical report.