BloomTrading Bot Users Report Nearly $1 Million in Losses from Wallet Drains

Users of BloomTrading, a Telegram-based trading bot, are reporting losses of nearly $1 million following a series of wallet drains that occurred on October 26, 2026. The company has temporarily paused certain services while it investigates the incident.

The attack targeted around 48 to 49 wallets associated with BloomTrading users, resulting in the theft of approximately 9,408 SOL, valued between $950,000 and $954,000 at the time of the incident. Notably, some USDC holdings in the affected wallets were reportedly left untouched. Individual losses varied significantly, with some users, including notable figures in the crypto space, claiming personal losses as high as $80,000.

In response to the situation, BloomTrading has implemented a three-part strategy: pausing specific functions, launching an investigation into a possible third-party compromise, and committing to reimburse affected users by transferring funds to new, secure wallets.

BloomTrading operates as a cross-chain trading automation tool within Telegram and has been active since 2018. The platform generates private keys for users’ wallets, meaning it holds the master password, a structure that has drawn criticism for its inherent risks, including key exposure and potential compromises of user accounts.

The incident raises broader concerns about the safety of custodial trading bots, echoing previous security breaches within the crypto sector. Affected users are now left questioning the effectiveness of Bloom's reimbursement promise and the root cause of the breach. Until the investigation concludes, many are advising others to withdraw their funds from the platform.