BloomTrading, a cross-chain Telegram trading automation platform operating on Solana and EVM networks, has pledged full reimbursement to nine affected wallets after users reported unauthorized withdrawals of Solana tokens. Blockchain monitoring linked roughly 9,408 SOL, valued at approximately $954,000, to transfers from 49 wallets that reached a suspected receiving address.

Reported Losses and Blockchain Findings

Complaints surfaced as traders shared wallet addresses and transaction records showing unexpected SOL outflows. Investigators identified the 9,408 SOL total moving to one address suspected of handling the drained funds. The largest individual loss stood at 1,636 SOL, worth around $166,000 at the time of the transfers. The overall figure represents activity tied to that address and may not capture every loss.

One trader known as Domy reported three wallets drained of about 800 SOL and later cited an additional unexpected transfer of roughly $64,000. The trader publicly shared affected addresses and sought help contacting exchanges to trace the funds. Other community members described similar incidents affecting Solana traders and cautioned against blaming victims for their strategies.

In some cases, USDC balances remained intact while SOL was removed. Several reports involved wallets whose private keys had been imported into the trading bot, though no definitive determination has been made on whether those keys were exposed.

Company Response and Reimbursement Plan

In a statement issued on October 26, BloomTrading said it would fully compensate the owners of nine confirmed affected wallets by sending replacement funds to new addresses designated by those owners. The platform rejected calls for a community-organized relief fund and stated it would cover the losses itself.

The company indicated its inquiry includes the possibility that a third-party service provider was compromised. It has not confirmed any specific vulnerability, internal issue, or external attacker. BloomTrading temporarily paused certain services during the review and directed users to submit support tickets through Discord.

The firm’s count of nine wallets differs from the 49 addresses identified in blockchain monitoring. No explanation has been provided for the discrepancy, and BloomTrading has not detailed a payment timeline, the expected total refund amount, or the exact verification process for claims.

Security Context and Next Steps

Trading bots that handle private keys for automated transactions carry inherent risks. Once a private key is obtained by an unauthorized party, disconnecting the wallet from an application does not stop further asset movement. Users whose keys may have been exposed are advised to move remaining funds to newly generated wallets.

BloomTrading has stated its priorities are compensating confirmed users, determining the cause of the unauthorized transfers, and preventing recurrence. No completed investigation results or detailed technical report have been released. The platform continues to review reported wallet activity.