Crypto▼ Bearish
Triple-A Hot Wallets Drained of $9.7M in Multi-Chain Hack
A security breach at Triple-A led to over $9.7 million in unauthorized withdrawals from hot wallets across six blockchains. The company has not acknowledged the incident.
Continue with
A security breach at Singapore-based stablecoin payment processor Triple-A has resulted in unauthorized withdrawals exceeding $9.7 million from the company's hot wallets, blockchain security researchers said Friday.
Blockchain investigator Specter first flagged anomalous fund movements from Triple-A wallets on TRON, Ethereum, Polygon, and Arbitrum. Cybersecurity firm PeckShield confirmed the findings and updated the estimated loss from $9.3 million to $9.7 million as more transactions surfaced.
The attack hit wallets on Ethereum, Solana, TRON, and TON networks. Evidence also points to compromises on Polygon and Arbitrum, potentially expanding the breach to six blockchains, security analysts said.
The stolen assets were converted and bridged to Ethereum, where the destination wallet held about 5,226.66 ETH when flagged. Converting multiple tokens into a single liquid cryptocurrency is standard procedure after cross-chain breaches, analysts said.
Triple-A offers payment processing that lets businesses accept, exchange, and disburse funds through stablecoin rails and traditional banking. The firm holds regulatory licenses in the United States, Europe, and Singapore. It secured Major Payment Institution status from Singapore's Monetary Authority and joined the Circle Payments Network in March 2026.