Bloom Trading confirmed that an exploit on Oct. 26, 2026, drained about 9,408 SOL, worth approximately $947,000, from nine users controlling 49 affected wallet addresses. Bloom said the attack involved a remote code execution vulnerability in a third-party software module and that no private keys were compromised. It has not publicly explained how the unauthorized transfers were approved.
Bloom pledged to reimburse the affected users in full but gave no deadline. It took its systems offline as a precaution and has not announced when normal service will resume.
