- On-chain trackers put losses from the drain of Triple-A’s hot wallets at about US$11.8 million by 26 July, up from the US$9.3 million first flagged two days earlier.
- Wallets were emptied across TRON, Ethereum, Polygon, Arbitrum, Solana and TON, with the proceeds swapped on decentralised exchanges and bridged into about 5,227 ETH at one Ethereum address.
- Triple-A head of marketing Tatyana Chernov said the company is investigating and that customer funds are not impacted; no incident notice had appeared on its newsroom as of Monday.
On-chain trackers estimate that about US$11.8 million (AU$16.87 million) has been drained from hot wallets belonging to Triple-A, the Singapore-based crypto payments firm, with the total rising through 26 July as fresh deposits were swept out.
The on-chain analyst known as Specter flagged the outflows on 24 July, reporting that more than US$9.3 million (AU$13.3 million) had been “drained, swapped, and bridged to Ethereum” from wallets on TRON, Ethereum, TON and Solana.
Similarly, blockchain security firm PeckShield followed a day later, putting the figure above US$9.7 million (AU$13.87 million) across TRON, Ethereum, Polygon and Arbitrum and reporting that about 5,227 ETH was being consolidated at a single Ethereum address.
That stash was worth roughly US$10.16 million (AU$14.53 million) at Monday’s ether price of US$1,943.73 (AU$2,779.53).
The two analysts named overlapping sets of chains, six in total, and neither published a per-chain breakdown of the losses.
Related: Coinbase Business Launches AI Payment Tools for the Agent Economy
How the Wallets Were Drained
Triple-A confirmed it was looking into the incident. “We are actively investigating the situation and will share a formal update as soon as possible,” head of marketing Tatyana Chernov said. “We can confirm that customer funds are not impacted.”
The company had published no notice about the incident on its own newsroom as of Monday morning AEST, and has not said how the wallets were accessed, whether merchant settlements were disrupted, or whether deposits have been paused.
Researchers who reviewed the transactions traced the losses to compromised wallet infrastructure, with the attacker signing transfers directly from the affected addresses. They found no smart contract exploit in the transaction record.
Hot wallets sit online so payment firms can settle merchant transactions within seconds, which leaves their keys exposed. Specter reported that deposits were still reaching the affected addresses and being swept while the drain ran, which is why the running estimates kept climbing. No one has been identified as responsible.
CNA has reported similar cases, including the Polymarket vendor breach and the laundering of US$220 million (AU$314.6 million) taken from Kelp DAO, where attackers also converted holdings across chains and pooled them on Ethereum.
Related: Bitcoin Rallies as US Crypto Bill Nears Finish Line, AI Trade Cools
Crypto Wallets,Hackers,Singapore#TripleA #Crypto #Wallet #Hack #Swells #Million1785142757
