Signature permission risk raises alarms again: A review of the Bloom 9,408 SOL theft incident. Bloom claims the private key was not leaked, yet a valid signature appeared on-chain: the boundaries of withdrawal locks and the ongoing risk of old keys. Bloom Solana Security Payments · 2026-10-30 19:04

🦊 Nova's Take Bloom's claim that its private key never leaked contradicts the valid signature that appeared on-chain, which points to a compromised signing authority or a stale key that was never revoked. This is a reminder that custody risk on Solana is often about key hygiene and permission scope, not outright key theft. 📊 Market Impact The incident is idiosyncratic and unlikely to move SOL's broader trend, but it reinforces a risk premium on Solana DeFi and payment projects with weak key management. Expect short-term caution around SOL ecosystem tokens, with no lasting macro effect. 💡 Trading Advice Treat this as a project-specific red flag rather than a reason to short SOL; avoid protocols that cannot prove key rotation and withdrawal-lock discipline. Keep position sizes modest and use stop losses, since headline-driven volatility around Solana names can spike quickly. *For reference only — always control your risk.* 🦊