Hackers drain 9,400 SOL from bot wallets, and a copied key is blamed
Summary
Bitquery says 48 Bloom-associated Solana wallets lost 9,408 SOL in rapid transfers signed by the wallets’ own keys. Bloom attributed the incident to a remote-code-execution flaw in a third-party module, denied private-key compromise, and said all affected users were refunded. The key signatures leave unresolved whether an attacker copied private keys or abused a service signing path. Bloom’s withdrawal-address lock only protects its withdrawal process; it cannot prevent transfers authorized with the wallet’s controlling key. Users whose keys may have escaped need to move funds to a fresh wallet with an uncompromised key, rather than merely changing service access or reusing the old key.
