Bloom Says 'No Private Keys Were Compromised.' Every One of the Drains Was Signed With the Wallet's Own Key, and It Took 94 Seconds

Solana trading bot Bloom lost 9,408 SOL (about $947K) from 49 wallets belonging to nine users on October 26. Bloom blames a remote code execution bug in a third-party module and says no keys were compromised. On-chain tracing by Bitquery found every transfer was signed with the victim wallet's own key. Some of the drained wallets hadn't been used through Bloom since early 2025.