Back
Triple-A hot wallet hack suspected as losses rise to about $11.8 million

Triple-A hot wallet hack suspected as losses rise to about $11.8 million

On-chain investigators said funds were drained across six blockchains, and Triple-A later confirmed it was investigating while saying customer funds were not affected.

ETH
SOL
TRX

Fact Check
The claim is consistently corroborated across CryptoTimes, CoinNess, PANews, and multiple X posts. All report a suspected Triple-A hot wallet drain of more than $9.3M (up to $9.7M per PeckShield) spread across several blockchains, swapped and bridged to Ethereum, with 5,227 ETH consolidated at a single address (0x01F8). The sources also note this occurred amid a broader run of hot-wallet attacks (e.g., Bonzo, TeleSwap), matching the claim. The incident remains 'suspected' and unconfirmed by Triple-A officially, which matches the claim's hedged wording ('suspected'). The minor variance ($9.3M vs $9.7M) reflects differing analyst estimates, not a contradiction of the 'more than $9.3 million' claim.
Summary

Triple-A's wallets appear to have been hit in a suspected hot-wallet compromise, with estimated losses initially reported at about $9.7 million and later tracked closer to $12 million, after earlier estimates around $11.8 million, according to on-chain investigator Specter and blockchain security firm PeckShield. Researchers said the drain spanned Ethereum, Tron, Polygon, Arbitrum, Solana and TON before assets were consolidated on Ethereum, where about 5,227 ETH was held in a single address. Triple-A, a Singapore-based crypto payments gateway founded in 2017, said it is investigating the incident and that customer funds were not affected. The company holds a Major Payment Institution license from the Monetary Authority of Singapore and says it also has regulatory authorizations in the U.S. and EU. Triple-A uses Fireblocks in its wallet infrastructure, though no public evidence has tied the incident to that provider. The case underscores the persistent security risks around internet-connected hot wallets used for real-time crypto payment settlement, even at regulated firms with institutional custody tooling.

Terms & Concepts
  • hot-wallet compromise: A breach involving internet-connected wallets used for operational transfers, making funds easier to move if access is gained.
  • on-chain investigator: An analyst who tracks public blockchain transactions to identify suspicious fund movements.
  • cold storage: Offline custody for digital assets that is generally less exposed to online attacks than operational wallets.