Bloom Trading says it will fully reimburse users after a third-party software flaw enabled the theft of about 9,408 Solana (SOL), worth roughly $947,000, from user wallets.
The company reported that 49 wallet addresses belonging to nine users were affected. Bloom attributed the breach to a remote code execution vulnerability in a third-party module, based on its investigation.
Bloom said private keys were not accessed or leaked and that wallets outside the affected group remain safe. It temporarily took all its systems offline while responding to the incident.
The cross-chain trading automation platform said it is monitoring the stolen SOL and evaluating ways to recover the funds or stop them from moving. When service returns, users must log in again through Bloom Manager and the Chrome extension.
