BloomTrading stated that no user private keys were compromised or accessed during the October 26, 2026 remote code execution exploit.

Overview Debates Related claims Topics Sources

The October 26, 2026 BloomTrading security incident affected 48 to 49 wallet addresses belonging to nine individual users.

Telegram trading bots like BloomTrading manage or hold user private keys to execute automated trades, creating central attack vectors for server-side vulnerabilities.

BloomTrading committed to fully reimbursing 100% of the stolen funds directly to newly generated, secure wallets designated by the nine affected users.

The reported loss figures from the October 26, 2026 BloomTrading exploit indicated an average price of approximately $101 per SOL during the drain.

The October 26, 2026 BloomTrading drain primarily targeted SOL holdings while leaving USD Coin (USDC) stablecoin balances untouched in affected wallets.

The single largest individual loss in the October 26, 2026 BloomTrading attack was 1,636 SOL, valued at approximately $166,000.

In September 2024, Telegram trading bot Banana Gun reported an exploit where 11 users lost approximately $3 million in Ether.

In October 2023, users of Telegram trading bots Maestro and Unibot lost a combined $1.1 million to smart contract router exploits.

BloomTrading temporarily paused platform services, took all systems offline as a precautionary measure, and instructed affected users to submit Discord support tickets.

BloomTrading attributed the October 26, 2026 security breach to a remote code execution vulnerability in a third-party software module.

Blockchain tracker Onchain Lens noted that total losses from the BloomTrading exploit could ultimately exceed the initial $954,000 estimate.

Trezor announced plans to significantly reduce and restructure its global authorized reseller network beginning January 1, 2027, to strengthen supply chain control.

Firms 21Shares, Virtune, and Valor launched Zcash exchange-traded products in European markets earlier in 2026 prior to the CoinShares suspension.

Grayscale's US-listed Zcash fund recorded its highest weekly inflows since mid-September during the week ending October 23, 2026.

The reported hardware implant inside the Trezor Safe 5 allegedly reads information displayed on the screen, including the recovery phrase, and transmits it over a mobile network when plugged into power.

Ledger asked authorized resellers and distributors across Malaysia, Indonesia, Singapore, Thailand, Philippines, Vietnam, and Hong Kong to halt device sales following supply chain security compromises.

An Indonesian user reported finding an extra circuit board with a cellular module and antenna between the screen and main board of a Trezor Safe 5 bought from CryptoBilis via Tokopedia in August 2026.

Trezor is offering replacement devices shipped directly by the company or vouchers for a new wallet to customers who purchased Trezor devices through CryptoBilis.

Trezor stated on October 30, 2026, that it treats the hardware implant report as credible while arranging to examine the affected Trezor Safe 5 device in its laboratory.

The Singapore Police Force issued a public advisory on October 28, 2026, regarding tampered Ledger hardware wallets carrying malicious components that resulted in $3.5 million in reported losses.