Bloom Trading, one of Solana’s retail trading bots, reported a security breach that drained 49 user wallets and cost 9 users roughly 9,408 Solana, or about $953,000 at the time. The attack happened fast, with nearly $1 million moving out across all affected wallets in about 94 seconds.
What stands out is how concentrated the damage was: just 9 users accounted for the total loss across 49 wallets. That pattern fits how high-frequency traders often split activity across multiple wallets to manage strategies or move quickly on new token launches.
The key detail still unresolved is how the attacker got in. Bloom has confirmed the incident and said it will reimburse affected users, but it has not disclosed whether the breach began with a direct hack, a compromise at a third-party provider, or phishing-style theft of credentials.
That uncertainty matters because trading bots are built for speed, which can mean users hand over some form of wallet access or transaction authority so trades can be executed without manual approval. Until Bloom releases a fuller forensic account, the scope is clear: nearly $1 million lost and 9 users hit, but the root cause remains unanswered.