@BloomTrading
Bloom is hiring a Mobile Developer and Designer
👉 What you will do
• Own mobile UI/UX across the Bloom platform
• Own and evolve the design system behind every app
• Work daily with product and frontend, from first flow to pixel perfect handoff
👉 What you bring
• Shipped, data dense product UI: trading, fintech, dashboards, or dev tools
• Strong UX thinking, including empty, error, and loading states
• Figma and Paper mastery, plus real frontend skills
Bonus: you build your own designs in code with AI tools, or you trade.
→ Full time
→ Can be fully remote
→ Start ASAP
→ Compensation discussed privately
📌 DM us, open a Discord ticket or email info@bloombot.appView quoted post on X
Official Statement | Security Incident Update
TL;DR: No private keys were compromised, unaffected wallets are safe, and all affected users will be fully reimbursed by Bloom.
Following our investigation, we have identified the exact attack vector and confirmed the scope of the incident.
The attack exploited a third-party module through a complex Remote Code Execution (RCE) vulnerability. No private keys were accessed or compromised, and we have ruled out broader exposure of users' wallets.
Incident Overview
Affected: 49 wallet addresses belonging to 9 users.
• Total losses: Approximately 9,408 SOL ($947,000).
• Root cause: Exploited third-party module enabling an RCE vulnerability.
• Refunds: Bloom will fully reimburse 100% of the stolen funds directly to secure wallets designated by the affected users.
• We are also working to trace the stolen funds, explore recovery and freezing options, and identify the attacker.
Our team has been developing software since 2018 and operating in crypto since 2021. We are an established team, committed to building for the long term and protecting the trust of our users.
Security threats are an unfortunate reality of this industry, even with extensive precautions in place. Our commitment to user safety, transparency, and business continuity remains unchanged.
The Bloom TeamView quoted post on X
Official Statement | Security Incident Update
TL;DR: No private keys were compromised, unaffected wallets are safe, and all affected users will be fully reimbursed by Bloom.
Following our investigation, we have identified the exact attack vector and confirmed the scope of the incident.
The attack exploited a third-party module through a complex Remote Code Execution (RCE) vulnerability. No private keys were accessed or compromised, and we have ruled out broader exposure of users' wallets.
Incident Overview
Affected: 49 wallet addresses belonging to 9 users.
• Total losses: Approximately 9,408 SOL ($947,000).
• Root cause: Exploited third-party module enabling an RCE vulnerability.
• Refunds: Bloom will fully reimburse 100% of the stolen funds directly to secure wallets designated by the affected users.
• We are also working to trace the stolen funds, explore recovery and freezing options, and identify the attacker.
Our team has been developing software since 2018 and operating in crypto since 2021. We are an established team, committed to building for the long term and protecting the trust of our users.
Security threats are an unfortunate reality of this industry, even with extensive precautions in place. Our commitment to user safety, transparency, and business continuity remains unchanged.
The Bloom TeamView quoted post on X
