Hacker Drains Nearly $1,000,000 in SOL From Solana Trading Bot Users in 94 Seconds

A hacker has drained nearly $1 million worth of Solana (SOL) from users of a crypto trading bot that runs inside the Telegram chat app.

The attack hit 49 wallet addresses belonging to nine users and took about 9,408 SOL, worth roughly $947,000, says Bloom, the company behind the bot.

Bloom says the attacker exploited a third-party module through a remote code execution (RCE) vulnerability.

Says Bloom,

“No private keys were compromised, unaffected wallets are safe, and all affected users will be fully reimbursed by Bloom.”

On-chain data from blockchain analytics firm Bitquery shows the attacker tested one wallet per trader, then emptied each trader’s wallets biggest first, all in 94 seconds.

Bitquery counts 48 drained wallets and puts the loss at about $953,000, with the largest single loss at 1,636 SOL, or about $166,000.

The attacker took only SOL and left behind about $57,000 in USDC.

Almost all of the stolen SOL still sits unmoved in one wallet controlled by the attacker.

Trading on Bloom stopped hours after the drain, and the company says it will repay 100% of the stolen funds directly to new wallets chosen by the affected users.

Says Bloom,

“There won’t be any need for a relief fund. Bloom will fully reimburse all funds lost by the 9 affected wallets, directly to new, secure wallets designated by their respective owners…

User safety remains our top priority. As a precaution, we recommend moving remaining funds to fresh wallets with newly generated private keys.”

Follow us on X, Facebook and Telegram
Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

The post Hacker Drains Nearly $1,000,000 in SOL From Solana Trading Bot Users in 94 Seconds appeared first on The Daily Hodl.