TITAN retweeted
Official Statement | Security Incident Update
TL;DR: No private keys were compromised, unaffected wallets are safe, and all affected users will be fully reimbursed by Bloom.
Following our investigation, we have identified the exact attack vector and confirmed the scope of the incident.
The attack exploited a third-party module through a complex Remote Code Execution (RCE) vulnerability. No private keys were accessed or compromised, and we have ruled out broader exposure of users' wallets.
Incident Overview
Affected: 49 wallet addresses belonging to 9 users.
• Total losses: Approximately 9,408 SOL ($947,000).
• Root cause: Exploited third-party module enabling an RCE vulnerability.
• Refunds: Bloom will fully reimburse 100% of the stolen funds directly to secure wallets designated by the affected users.
• We are also working to trace the stolen funds, explore recovery and freezing options, and identify the attacker.
Our team has been developing software since 2018 and operating in crypto since 2021. We are an established team, committed to building for the long term and protecting the trust of our users.
Security threats are an unfortunate reality of this industry, even with extensive precautions in place. Our commitment to user safety, transparency, and business continuity remains unchanged.
The Bloom Team
TITAN retweeted
$15,000 Public Bounty for Fund Recovery
I'm calling on all developers and security researchers. I'd really appreciate your help.
I'll pay $15,000 to anyone who can successfully recover my funds mistakenly sent from Abstract to BNB Chain.
Wallet:
0x6ae0145e60b073e8c47b922f16c0f9e71e3efa86
Transaction:
bscscan.com/tx/0x512b66bef73…
If you know anyone who might be able to help, please tag them or share this post.
If only I had known about @Americanfort_io earlier... 🥲
@AbstractChain Wrong-Chain Deposit Update
> Copied my Abstract address to send gas fees.
> Tried to copy my EVM address for the rest.
> Copy failed. Funds went to the previous address.
Unfortunately, even the Abstract Foundation confirmed that recovering my funds is technically impossible due to differences between EraVM and EVM smart contract wallet address derivation.
Potentially recoverable:
Abstract ↔ zkSync Era
Both use EraVM, so deploying a smart contract wallet at the same address may be possible.
Practically unrecoverable:
Abstract ↔ BNB Chain (and other standard EVM chains)
Abstract uses EraVM, while BNB Chain uses standard EVM. Their CREATE2 address derivation methods differ, meaning the same deployment process cannot reproduce the same wallet address.
The only remaining options would be obtaining the private key or brute-forcing a 160-bit address using CREATE2.
Both are practically impossible.
RIP my $20,000 USDC. 🥲
If Only I Had Known About American Fortress Earlier...
American Fortress is building Send-to-Name technology, allowing users to send crypto using an @<name> instead of copying and pasting complicated wallet addresses.
They're also developing ZK-based technology to verify wallet ownership across different blockchains without exposing seed phrases.
Of course, this doesn't mean their technology could have recovered my funds or necessarily prevented my mistake.
But this experience made me rethink crypto UX.
We've spent years focusing on TPS, lower fees, and scalability.
Yet users still have to copy long wallet addresses, manually select networks, and risk losing everything because of one small mistake.
In traditional finance, a mistaken transfer may be reversible through a bank.
In crypto, one wrong click can mean losing your funds forever.
I believe mass adoption will require more than faster and cheaper blockchains.
We also need better UX and security infrastructure that protects users from irreversible mistakes.
Anyway, I paid $20,000 to learn this lesson.
TITAN retweeted
WOW! Just 14 hours ago, @slingoorio’s portfolio was worth $8M, now it’s worth $19.7M 🤯
He’s up $16M in the last 24 hours, with $9.47M of that coming from his Big Titty Coin position!
TITAN retweeted
The economy will shut down for a full week
Basically free money shorting stocks imo
Watch the Grand Theft Auto VI Launch Trailer, featuring the debut of “Flower in a Hurricane" from original score composers Justice feat. Tame Impala, SZA, and King Gizzard & The Lizard Wizard.
Grand Theft Auto VI arrives November 19: rockstargames.com/VI/ps5
Grand Theft Auto VI Launch Trailer
They don’t know what’s coming. 🐺
Exploring @thewolffund on my Fold 7 its kinda cool to see the expansion that is done, adding those places and stuff, genuinely cool to see 🔥🐺
Look at this LW NFT 👀
Sounds like an ALPHA @Web3lfgg ?
Try the game as a guest also
play.wolffund.info/




























