Hacker Steals Nearly $1 Million in SOL from Solana Trading Bot Users

A significant security breach has occurred involving a Solana trading bot, resulting in the theft of nearly $1 million worth of SOL from users. The incident, which took place within the Telegram chat app, affected 49 wallet addresses belonging to nine users, with an estimated loss of 9,408 SOL, valued at around $947,000, according to Bloom, the company behind the trading bot.

The attacker exploited a remote code execution (RCE) vulnerability in a third-party module, allowing them to drain funds rapidly. On-chain data from Bitquery indicates that the hacker tested one wallet per trader before emptying the largest amounts first, all within a swift timeframe of 94 seconds. The total loss recorded by Bitquery is approximately $953,000, with the largest individual loss amounting to 1,636 SOL, or about $166,000.

Importantly, Bloom has stated that no private keys were compromised, and unaffected wallets remain secure. The company has committed to fully reimbursing the affected users directly to new wallets they designate. Bloom emphasized that user safety is their top priority and advised users to transfer any remaining funds to newly generated wallets with fresh private keys as a precaution.

Following the incident, trading on Bloom was halted for several hours, and the company is taking measures to ensure the security of its users moving forward.