Bitquery reported that five wallets drained during the October 26, 2026 attack had been inactive on BloomTrading since the first half of 2025.