Bloom Trading security incident involves RCE vulnerability; no private keys leaked

iconKuCoinFlash
Share
AI summary iconSummary
Bloom Trading reported a security breach on October 26 (UTC+8) involving a remote code execution (RCE) vulnerability in a third-party module. Trading activity remained unaffected for most users, as no private keys were accessed or leaked. The incident affected 49 wallet addresses across 9 accounts, with total losses amounting to 9,408 SOL ($947,000). Bloom Trading has committed to full compensation and is actively tracking the stolen assets. All systems have been taken offline for investigation, and users will need to log in again after recovery. This incident underscores the importance of monitoring trading volume and platform security.

According to ME News, on October 26 (UTC+8), cross-chain trading automation platform Bloom Trading tweeted an update on the security incident investigation. The attack exploited a remote code execution (RCE) vulnerability in a third-party module; private keys were not accessed or compromised, and unaffected wallets remain secure. All Bloom systems have been temporarily taken offline; users will need to log back in to Bloom Manager and the Chrome extension once services are restored.
This incident involved 49 wallet addresses belonging to nine users, resulting in a loss of approximately 9,408 SOL (around $9.47 million). Bloom will fully compensate for the stolen funds and is currently tracking the stolen assets while exploring options for recovery and freezing. (Source: Foresight News)

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.