Back Kucoin

Bloom Trading security incident involves RCE vulnerability; no private keys leaked

Kucoin • October 26, 2026

According to ME News, on October 26 (UTC+8), cross-chain trading automation platform Bloom Trading tweeted an update on the security incident investigation. The attack exploited a remote code execution (RCE) vulnerability in a third-party module; private keys were not accessed or compromised, and unaffected wallets remain secure. All Bloom systems have been temporarily taken offline; users will need to log back in to Bloom Manager and the Chrome extension once services are restored.

This incident involved 49 wallet addresses belonging to nine users, resulting in a loss of approximately 9,408 SOL (around $9.47 million). Bloom will fully compensate for the stolen funds and is currently tracking the stolen assets while exploring options for recovery and freezing. (Source: Foresight News)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Bloom Trading Reports $947,000 Theft Due to RCE Vulnerability Bloom Trading reported a theft of approximately $947,000 in Solana (SOL) due to a remote code execution (RCE) vulnerability in a third-party module. The company confirmed that private keys were not accessed or leaked, ensuring the safety of unaffected wallets. The incident impacted nine users across 49 wallet addresses, with a total loss of 9,408 SOL. Bloom has temporarily taken its systems offline and is tracking the stolen assets while exploring recovery options. The company has pledged to fully reimburse the affected users. Users will need to log back into Bloom Manager and the Chrome extension once services are restored. 2 sources 39

Extracted Entities

Bloom Trading security incident involves RCE vulnerability; no private keys leaked

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

Platforms (2)