Key Takeaways
- Blockchain forensics firms traced approximately 9,408 SOL, valued at roughly $954,000, to 49 wallets believed to be victims of unauthorized withdrawals.
- The cryptocurrency trading platform announced plans to provide complete reimbursement to nine confirmed affected wallets via fresh addresses selected by the users.
- One victim suffered a loss of 1,636 SOL, representing approximately $166,000 in value during the incident.
- Platform operators are examining the possibility that a compromised external service provider may be responsible for the breach.
- The company has yet to disclose a reimbursement timeline or address the discrepancy between nine confirmed cases and 49 suspected victims.
A cryptocurrency trading automation platform serving Solana network users has committed to compensating victims following the unauthorized withdrawal of close to $1 million worth of SOL tokens from connected wallets.
On October 26, BloomTrading issued a public statement confirming its intention to provide full compensation to nine verified affected wallet holders. The reimbursement will be distributed to fresh wallet addresses designated by the impacted users.
The commitment follows widespread reports from traders who discovered unexpected outflows from wallets they had connected to the automated trading infrastructure.
On-Chain Analysis Reveals Scope of Unauthorized Transfers
Blockchain surveillance account Onchain Lens documented approximately 9,408 SOL originating from 49 wallets suspected to belong to victims. At the time of transfer, these tokens carried an estimated value of $954,000.
The most substantial individual loss amounted to 1,636 SOL, worth roughly $166,000 based on prevailing market rates. Because this calculation tracks transfers to a single suspected destination address, the actual total damage may exceed current estimates.
A trader operating under the handle Domy disclosed that three separate wallets under their control had been emptied of approximately 800 SOL. Domy published the compromised wallet addresses publicly and requested community assistance in reaching cryptocurrency exchange operators to trace the stolen assets.
In a follow-up message, Domy documented an additional unauthorized transfer valued at approximately $64,000. Supporting evidence included a transaction record from Solscan, a Solana blockchain explorer.
Trader Pikalosi highlighted the widespread impact on members of the Solana trading ecosystem. Pikalosi urged community members to avoid criticizing victims based on their choice of trading tools or approaches.
Numerous complaints centered on wallets whose private keys had been imported into the trading automation system. Investigators have not yet determined whether these cryptographic keys were actually compromised during the incident.
Private keys grant their possessor the authority to authorize transactions from a wallet. If an unauthorized party gains access to a private key, simply disconnecting the wallet from an application proves insufficient to prevent further asset transfers.
Some affected users noted that their USDC stablecoin holdings remained intact while their SOL balances vanished. Whether this pattern holds true across all compromised wallets remains unverified.
Platform Commits to Self-Funded Compensation Program
BloomTrading rejected community proposals to establish a collective relief fund for victims. Company representatives stated the platform would assume full financial responsibility for the losses.
“We’re still actively investigating the root cause,” the platform announced. Company officials indicated their inquiry would include scrutiny of whether an external service provider suffered a security breach.
The platform has not released details regarding a compensation schedule, the aggregate amount earmarked for refunds, or the verification process for legitimate claims. The announced figure of nine affected wallets also conflicts with the 49 suspected victim addresses identified through blockchain analysis.
According to reports, certain trading functionalities were temporarily suspended during the ongoing investigation. The specific features that were disabled and whether normal operations have resumed remains unconfirmed by independent sources.
This security incident follows a September exploit targeting Avici wallet users. That breach reportedly resulted in unauthorized transactions causing over $1 million in losses among Solana network participants.
Security experts recommend that users whose private keys may have been exposed immediately transfer any remaining digital assets to completely new wallets generated with fresh cryptographic keys. Merely revoking application permissions cannot remediate a compromised private key.
BloomTrading has not yet pinpointed a specific security vulnerability or attributed the incident to an external threat actor. Company officials stated their current priorities include compensating affected users, determining the breach’s origin, and implementing safeguards to prevent recurrence.


