BloomTrading stated that no user private keys were compromised or accessed during the October 26, 2026 remote code execution exploit.