Nearly $1 million stolen in just 94 seconds.
According to a blockchain investigation by Bitquery, an attacker drained 9,408 SOL worth approximately $953,000 from 48 wallets belonging to nine traders who had used the Bloom trading bot on Telegram.
But the most alarming detail is this: some of the affected wallets had not been used with the bot since the first half of 2025.
The attacker tested wallets, identified the targets and drained their funds in a coordinated sequence. Almost all the stolen SOL ended up in a single wallet.
Bloom attributed the incident to a remote code execution vulnerability in a third-party module and promised to reimburse all affected users in full. The precise mechanism behind the attack remains under investigation.
What does this incident reveal?
๐น Old connections can create new risks. Discontinued use of a service does not necessarily eliminate exposure associated with previously connected wallets.
๐น Speed changes the economics of crime. Automated attacks can move substantial amounts of digital assets before victims have time to react.
๐น Tracing matters. Blockchain intelligence can reconstruct transaction flows, connect related transfers and help investigators identify where stolen assets move.
The key question is no longer just how to prevent a breach. It is also how quickly suspicious activity can be detected, investigated and acted upon.
In digital finance, every second counts.
#AMLBot #BlockchainIntelligence #AML #CryptoCompliance #CryptoExchanges