Triple-A Hot Wallets Exploit Leads to $12M Loss Across Six Blockchains

Triple-A, a Singapore-based crypto payments gateway, experienced a security breach that drained approximately $12 million from its hot wallets across six blockchains, including Ethereum, TRON, and Polygon. The incident was first flagged by analysts on July 24, 2026, and the company confirmed it is investigating the breach while asserting that customer funds remain safe. Initial estimates of the loss were around $9.7 million but were later revised upward. The compromised wallets were connected to the internet, making them more vulnerable to attacks. The funds were consolidated into a single Ethereum address holding roughly 5,227 ETH. The attack may have resulted from a compromised private key or a vulnerability in the wallet management layer. Triple-A's cold storage, where the majority of assets are kept, was reportedly unaffected. The company holds a Major Payment Institution license from Singapore's Monetary Authority and operates in multiple jurisdictions, including the US and EU.

Key Points: • Triple-A lost approximately $12 million from hot wallets across six blockchains. • The company confirmed that customer funds are safe and is investigating the incident. • The attack may involve a compromised private key or vulnerability in wallet management.