Security incident · 2026-10-26
Bloom Trading Bot
According to the public DefiLlama incident dataset, Bloom Trading Bot (Solana) suffered a security incident on 2026-10-26, with about $953K reported lost.
| Date | 2026-10-26 |
|---|---|
| Reported loss | $953K |
| Chain | Solana |
| Target type | Wallet |
| Technique class | Frontend & Infrastructure |
| Technique | Supply Chain Attack |
| Bridge incident | No |
| Within 2026 | #119 by loss that year, 0.0% of all reported losses that year |
How this kind of attack works
The website, domain or hosting was hijacked, and users signed transactions that sent funds to the attacker from a page that looked normal.
Would a pre-payment check have helped
When a frontend or domain is hijacked the payee address is freshly generated and on no list, but the hijacked host is often already a known phishing domain, so endpoint screening catches part of this class.
Other incidents with the same technique
- Binance CEX2026-10-29 · $6.36B
- Mixin Network2023-09-23 · $200.0M
- Badger DAO2021-12-02 · $120.0M
- Atomic Wallet2023-06-03 · $100.0M
- Ledger (Supply Chain)2026-10-09 · $93.0M
- NiceHash2017-12-08 · $64.0M