
Singapore payments firm said unauthorized access hit treasury wallets, not client funds, while on-chain data showed about 5,280 ETH consolidated in one address after cross-chain draining.
Triple-A said unauthorized access to treasury wallets led to the loss of about $11.8 million in company-owned digital assets, matching the higher figure tracked by on-chain researcher Specter after earlier estimates of $9.3 million and then $9.7 million. The Singapore-based payments firm said client funds were unaffected because customer assets are segregated from company holdings and it does not custody digital assets for clients, while the losses were confined to operational accounts and will be absorbed by treasury reserves. On-chain investigators said assets from Ethereum, Solana, TRON, The Open Network, Polygon, Arbitrum and Bitcoin were swapped, bridged and consolidated on Ethereum, with roughly 5,226.67 ETH, and separately about 5,280 ETH, observed in a single destination address. Triple-A said it identified the incident on July 25 and paused certain services for about three hours, but Specter said fresh deposits continued to reach compromised wallets and be swept for about 31 hours after the initial alert.