
On‑chain investigator Specter says Triple‑A's hot wallet losses have reached $11.8M, and new deposits continue to be drained. The company has not shut off the affected addresses.
On‑chain investigator Specter said losses from compromised hot wallets at Singapore payments firm Triple‑A have risen to an estimated $11.8 million, with new deposits continuing to land in the affected addresses and being drained more than 31 hours after the first outflows.
Specter publicly flagged the activity late Friday, tracking outflows across TRON, Ethereum, TON, and Solana. The stolen assets had already been swapped and bridged to Ethereum, where they consolidated at a primary address. A Sunday update added roughly another $1.8 million in losses, with Bitcoin now among the affected networks.
Security firm PeckShield had earlier put the figure above $9.7 million, showing the main Ethereum consolidation address holding about 5,227 ETH at the time.
Triple‑A acknowledged the reports on Saturday, saying it was investigating and would provide a formal update. The company said customer funds were not impacted. It has not released details on how the wallets were accessed or what type of hot wallets were involved.
Deposits into the affected addresses had not been disabled as of Specter’s latest assessment. Triple‑A is a licensed major payment institution under the Monetary Authority of Singapore, with additional licenses in France, the United States, and Canada. MAS rules require customer assets to be held in trust structures separate from operational holdings. The firm maintains the drained wallets did not contain customer funds.
The incident shows how hard it is to secure multi‑chain hot wallet infrastructure used for payment processing, especially when deposits remain active after a breach. Specter’s tracking documented the drain continuing even after the company was publicly alerted.
Triple‑A said it would issue a formal update when ready.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.