The Singapore-based stablecoin payments firm said the incident hit company-owned digital assets, with losses reaching $11.8 million and to be covered by treasury reserves while investigators work on the case.
Triple-A said unauthorized access to its treasury wallets led to the loss of $11.8 million in company-owned digital assets, but client funds were unaffected because the company does not custody customer crypto and keeps client money in separate trust accounts with safeguarding institutions. The Singapore-based stablecoin payments firm detected the incident on Saturday and put certain services into maintenance mode for about three hours while it secured the affected infrastructure. It said the financial impact was limited to specific operational accounts and would be absorbed through its treasury reserves, with all services restored and transactions and settlements processing normally. Triple-A has not released a technical explanation of how the wallets were compromised. The breach adds to a broader 2026 pattern of attacks targeting crypto infrastructure such as treasury wallets, bridges and settlement layers rather than individual users. Triple-A said it is working with cybersecurity specialists, blockchain forensics firms and authorities, including the Singapore Police Force, to investigate, trace the assets and support recovery efforts.