Bloom

Most advanced cross-chain trading automation ⚡️
SOL | EVM

Support:

[Bloom @BloomTrading]

Social Tasks + Tracker are live on Bloom.

Track the accounts and activity you care about. Monitor posts, follows, interactions and CAs.

Bloom is your Social trading edge.

[Bloom @BloomTrading]

To the individual responsible for the recent security incident:

Bloom is open to direct, confidential discussions toward a mutually agreed resolution.

We have collected substantial technical evidence, including IP addresses, data centers used, and other relevant information.

We are willing to negotiate a partial return of the funds in exchange for refraining from legal action within our control, subject to applicable law and mutually agreed terms.

To contact us:
• On-chain memo: 35yDUVrTnHwrZg8wAQoQaEHHfrzwgmhbTuTU91t8uTKK
• Email: [email protected]
• Official Discord or Telegram channels.

[Bloom @BloomTrading]

Official Statement | Security Incident Update

TL;DR: No private keys were compromised, unaffected wallets are safe, and all affected users will be fully reimbursed by Bloom.

Following our investigation, we have identified the exact attack vector and confirmed the scope of the incident.

The attack exploited a third-party module through a complex Remote Code Execution (RCE) vulnerability. No private keys were accessed or compromised, and we have ruled out broader exposure of users' wallets.

Incident Overview

Affected: 49 wallet addresses belonging to 9 users.

• Total losses: Approximately 9,408 SOL ($947,000).
• Root cause: Exploited third-party module enabling an RCE vulnerability.
• Refunds: Bloom will fully reimburse 100% of the stolen funds directly to secure wallets designated by the affected users.
• We are also working to trace the stolen funds, explore recovery and freezing options, and identify the attacker.

Our team has been developing software since 2018 and operating in crypto since 2021. We are an established team, committed to building for the long term and protecting the trust of our users.

Security threats are an unfortunate reality of this industry, even with extensive precautions in place. Our commitment to user safety, transparency, and business continuity remains unchanged.

The Bloom Team

[Bloom @BloomTrading]

All Bloom systems are currently offline as a precautionary security measure.

Once services are safely restored, we will announce it through our official channels.

At that point, all users will be required to log in again to Bloom Manager and the Chrome Extension to resume using Bloom normally.

Thank you for your patience and understanding.

[Bloom @BloomTrading]

Official Statement | Security Incident Update

TL;DR: No private keys were compromised, unaffected wallets are safe, and all affected users will be fully reimbursed by Bloom.

Following our investigation, we have identified the exact attack vector and confirmed the scope of the incident.

The attack exploited a third-party module through a complex Remote Code Execution (RCE) vulnerability. No private keys were accessed or compromised, and we have ruled out broader exposure of users' wallets.

Incident Overview

Affected: 49 wallet addresses belonging to 9 users.

• Total losses: Approximately 9,408 SOL ($947,000).
• Root cause: Exploited third-party module enabling an RCE vulnerability.
• Refunds: Bloom will fully reimburse 100% of the stolen funds directly to secure wallets designated by the affected users.
• We are also working to trace the stolen funds, explore recovery and freezing options, and identify the attacker.

Our team has been developing software since 2018 and operating in crypto since 2021. We are an established team, committed to building for the long term and protecting the trust of our users.

Security threats are an unfortunate reality of this industry, even with extensive precautions in place. Our commitment to user safety, transparency, and business continuity remains unchanged.

The Bloom Team

[Bloom @BloomTrading]

Blaming people who promoted Bloom in good faith isn't the answer. We're an established team, active in the industry since 2021, with a long-term commitment to our users and reputation.

We're actively investigating the root cause and have already committed to fully reimbursing all affected users.

We're not avoiding accountability. We're taking action, and our priority is making every affected user whole.

[Bloom @BloomTrading]

@flipski77 ❤️

[Bloom @BloomTrading]

We're actively investigating the full scope and root cause of this incident, including any potential third-party involvement.

To clarify the numbers, the 49 affected wallets belong to 9 individual users, not 49 separate victims.

Bloom has committed to fully reimbursing all verified losses related to the incident.

User safety remains our top priority. As a precaution, we recommend moving remaining funds to fresh wallets with newly generated private keys.

We'll continue providing transparent updates as findings are confirmed.

[Bloom @BloomTrading]

@SiYRyAn6 49 wallets belonging to 9 users. So 9 people total

[Bloom @BloomTrading]

@KayTheDoc We're aware of the reports and actively investigating. The root cause has not yet been confirmed.

We've already committed to fully reimbursing all confirmed affected users and will continue providing transparent updates as the investigation progresses.

[Bloom @BloomTrading]

We've identified 9 affected users so far and are actively investigating all reported wallet activity to establish the root cause and full scope of the incident.

Bloom has committed to fully reimbursing all affected funds. We'll continue sharing verified updates as the investigation progresses.

[Bloom @BloomTrading]

@chasexbtt @don94_ We've identified 9 affected users and are committed to fully reimbursing every affected user while we investigate the root cause.

[Bloom @BloomTrading]

This is not an exit scam. We're actively investigating the security incident and have already committed to fully reimbursing all 9 affected users.

Our team has been building software since 2018. We're well-established and would never compromise our reputation or integrity.

Our priority is making every affected user whole and identifying the root cause. Further updates will follow.

[Bloom @BloomTrading]

@Humanevolvd 9 users*

[Bloom @BloomTrading]

There won't be any need for a relief fund. Bloom will fully reimburse all funds lost by the 9 affected wallets, directly to new, secure wallets designated by their respective owners.

We're still actively investigating the root cause, including whether a third-party provider may have been compromised, especially given the recent wave of security incidents across the industry.

Our team has been building software since 2018. We're well-established, here for the long run, and would never compromise our integrity for any amount of money.

Our priority right now is to make every affected user whole, determine exactly what happened, and ensure it cannot happen again.

[Bloom @BloomTrading]

@piemclicks Yes, Bloom will fully refund all affected users. We've been building software since 2018, we're an established team here for the long run, protecting our users and our integrity remains our top priority.

[Bloom @BloomTrading]

Our team is currently investigating the issue. All other wallets remain safe.

Out of an abundance of caution, we’re temporarily disabling some services, and we’re working to restore them as soon as possible.

To stay in direct contact with our team, please open a ticket on discord.

[Bloom @BloomTrading]

@MINHxDYNASTY Having it should be nice,

not having it should be fine.

If you want to fancy dine,

use Bloom instead of rolling the dice

[Bloom @BloomTrading]

@basedsnipez Just @ us 😎

[Bloom @BloomTrading]

@basedsnipez To get there and achieve all that, you need time.

Everybody should start auto-trading to earn money and spend the saved time on their health, friends and family.

[Bloom @BloomTrading]

@ANIMEGEMSS Early

Earlier

Bloom

[Bloom @BloomTrading]

@zubic_eth There are gems in every market

Make sure you have the tools to catch them