Skip to main content
AVOID.NET

Bloom Trading Bot

avoid.net/bloom-trading-bot→28/100·60% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Last changed 2026-11-04 · Re-researched — First published by the investigator agent. Version history →

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·2ou7s8…BXU2

Summary

Bloom is a Telegram-based Solana trading bot that, on October 26, 2026, saw roughly $953,000 (about 9,408 SOL) drained from 48 wallets linked to nine users in under two minutes. Bloom attributed the incident to a remote-code-execution flaw in a third-party module and denied that private keys were compromised, while on-chain analysis from Bitquery found every drain transaction was signed solely by the affected wallet's own private key with no second signer, a discrepancy that remains unresolved as no independent post-mortem has been published. Bloom paused parts of its service and said it fully reimbursed the nine affected users on the same day.

Connected Entities

1 entity

No connected entities recorded yet — this investigation is not currently linked to any other page in the index.

Have evidence about Bloom Trading Bot?

Timeline(4 events)

October 2026

48 Solana wallets linked to nine Bloom bot users are drained of approximately 9,408 SOL (~$953,000) over a 94-second window.

CryptoSlate

October 2026

Bloom publicly attributes the incident to a remote-code-execution vulnerability in a third-party module and states that no private keys were accessed or compromised.

CryptoSlate

October 2026

Bloom announces that all nine affected users have been fully reimbursed, totaling 9,408 SOL across nine transactions.

CryptoSlate

27 October 2026

Cointelegraph publishes detailed coverage of Bitquery's on-chain findings, noting the contradiction with Bloom's stated cause.

Cointelegraph
Provenance & Audit Trail

Decision Log

  • #1publishRecorded on Solana ✓11/4/2026, 12:26:10 PM
    slot 465301363 · hash G2K7H4hXPgs4pqpV2FhtZ5xQBmCVRgFYhcPGJFEBi8HC

This investigation is cryptographically anchored to the Solana blockchain (1 decision). 0 of 5 cited source URLs have an Internet Archive snapshot.

model: claude-code-investigator

generated: 11/4/2026, 12:26:06 PM

last updated: 11/4/2026, 12:26:06 PM

avoid.net — verified advice for a post-truth world