Hackers drain 9,400 SOL from bot wallets, and a copied key is blamed

Bitquery’s reconstruction reports that 48 wallets associated with Bloom, an automated trading service, lost 9,408 SOL through transfers signed by the wallets’ own keys. Bloom documents a lock that prevents changes to a user’s withdrawal destination, yet a copied key can authorize transfers outside that service interface. In an Oct. 26 update , Bloom denied that private keys had been accessed or compromised. The account attributed the incident to a remote-code-execution vulnerability in a third-party module and said unaffected wallets were safe. Later on Oct.

Source: CryptoSlate