Official Statement | Security Incident Update
TL;DR: No private keys were compromised, unaffected wallets are safe, and all affected users will be fully reimbursed by Bloom.
Following our investigation, we have identified the exact attack vector and confirmed the scope of the incident.
The attack exploited a third-party module through a complex Remote Code Execution (RCE) vulnerability. No private keys were accessed or compromised, and we have ruled out broader exposure of users' wallets.
Incident Overview
Affected: 49 wallet addresses belonging to 9 users.
• Total losses: Approximately 9,408 SOL ($947,000).
• Root cause: Exploited third-party module enabling an RCE vulnerability.
• Refunds: Bloom will fully reimburse 100% of the stolen funds directly to secure wallets designated by the affected users.
• We are also working to trace the stolen funds, explore recovery and freezing options, and identify the attacker.
Our team has been developing software since 2018 and operating in crypto since 2021. We are an established team, committed to building for the long term and protecting the trust of our users.
Security threats are an unfortunate reality of this industry, even with extensive precautions in place. Our commitment to user safety, transparency, and business continuity remains unchanged.
The Bloom Team
Bloom is ready for day one.
Copy Trading, Social Tasks, Social Tracker, Afk, Strategies, Spot Buy and Sell, Orders, Deploy and Vamp. All packed into one account.
Want to make the most of it from your first trade? Here's how 👇
Lunya is on @BloomTrading from day one.
Trade any token launched on Lunya straight from the bot, on the curve and after it graduates, the moment Arc mainnet opens.
Robinhood Chain's memecoin trenches are moving fast enough that most traders can't launch and trade in the same breath. Bloom can.
Deploy covers Robinhood across @ponsdotfamily@flapdotsh@TradePools and @BagsApp.
Set your token, earn launchpad fees, and start trading it from the same screen 📱
Scrolling through our old changelog and found this 👀
Feb 12, the day we added @fomo copytrading to @BloomTrading. Early, and still one of the few doing it with no spoofing risk.
Quietly proud of this one.
Copytrading a wallet doesn’t mean copying their bad calls 🧠
Bloom lets you filter what you mirror: position size, market cap range, tokens to skip, when to stop.
👀 Follow the calls that work for you. Avoid the rest.
The most profitable @RobinhoodCrypto Chain wallets have already started to leak.
With Bloom, you can copy trade them automatically and let your strategy keep working while you’re away.
Add them to your Bloom bot, and let the copy trading begin.
Memecoin szn found a new home 🔥
You don’t need to be watching the charts to catch a @HyperliquidX runner.
Just set your conditions and let Bloom do the rest.
HyperEVM trading support is now live on Bloom ⚡️
Starting today you can use Spot, Copytrade, and automated Strategies across the @HyperliquidX ecosystem.
Hyperliquid built the fastest EVM. We made sure you can actually trade it that way.
Ever seen a big 𝕏 account mention a ticker or meme, then watched a token explode?
Bloom's Twitter Tracker puts you one click away when it happens.
Try it out:
HyperEVM trading support is now live on Bloom ⚡️
Starting today you can use Spot, Copytrade, and automated Strategies across the @HyperliquidX ecosystem.
Hyperliquid built the fastest EVM. We made sure you can actually trade it that way.
Memecoin szn is heating up 🔥
The next time you see a runner taking off, you may consider launching your own and trading it on Bloom.
What are you waiting for? The trenches await you.