Bloom Trading suffers $947,000 loss due to RCE vulnerability
Bloom Trading experienced a security incident resulting in a loss of approximately $947,000. Attackers exploited a Remote Code Execution vulnerability in a third-party module to drain funds from multiple wallet addresses.
Bloom Trading, a cross-chain trading automation platform, suffered a security incident where attackers exploited a Remote Code Execution (RCE) vulnerability in a third-party module. This breach resulted in the draining of approximately 9,408 SOL, amounting to about $947,000, from 49 wallet addresses belonging to 9 users. The team confirmed that no private keys were compromised and that other wallets remained safe during the incident.
In response to the incident, Bloom Trading pledged full reimbursement to the affected users and temporarily paused some services while conducting an investigation. The specific blockchain involved was not stated, which limits the ability to trace the transactions directly. However, the incident highlights the risks associated with third-party modules in cross-chain trading platforms.