Triple-A Hack: $11.8M Drained From Singapore Payments Firm's Treasury

Singapore-based crypto payments firm Triple-A confirmed a breach of its treasury wallets. According to independent estimates from on-chain investigator Specter, losses climbed to $11.8 million over 31 hours, with the attack spanning seven separate blockchains, The Block reports.

• Specter first flagged the abnormal outflows on July 24; the initial estimate was $9.3 million, but the total kept climbing as new deposits kept arriving at already-compromised addresses.
• Funds were drained across Ethereum, TRON, Polygon, Arbitrum, Solana, The Open Network, and Bitcoin; according to PeckShield, roughly 5,227 ETH was consolidated into a single Ethereum address.
• Triple-A says customer funds weren't affected, since the company doesn't hold client crypto assets directly — they sit in separate trust accounts as required by the Monetary Authority of Singapore.

We're actively investigating the situation and will share a formal update once ready. We confirm that customer funds are not impacted.

The weak spot in that account: the company still hasn't explained why incoming deposits kept flowing into compromised wallets throughout the entire 31-hour window, even though the incident was initially described as a three-hour maintenance pause. This isn't the first time several crypto platforms have lost money in close succession — we've already covered how three separate protocols lost a combined $35.55M in a single day.

This article is for informational purposes only and does not constitute investment advice.