Triple-A hot wallet losses reach $12M amid security incident

Triple-A, a licensed crypto payments gateway based in Singapore, is dealing with a security breach that drained an estimated $12M from the company’s hot wallets across multiple blockchains. The incident, first flagged by blockchain analysts on July 24, marks yet another reminder that the plumbing behind crypto’s growing payments infrastructure remains a favorite target for attackers. The company confirmed it is investigating the incident and stated that customer funds are not affected. What happened and how the funds moved Blockchain security firm PeckShield and on-chain investigator Specter were among the first to identify suspicious outflows from Triple-A’s wallets. The drain hit hot wallets on at least six separate chains: Ethereum, TRON, Polygon, Arbitrum, Solana, and TON. Estimates of the total loss vary. Some initial reports pegged the figure at $9.7M, while subsequent tracking pushed it closer to $12M. On-chain data shows the exploited funds were consolidated into a single Ethereum address holding roughly 5,227 ETH. Triple-A’s cold storage, the offline vaults where the bulk of assets are typically held, appears to have been untouched. The company’s hot wallets, by contrast, ...