Triple-A Hack: Losses Reach $11.8M as Wallet Drain Continues
Yash Shelke
Triple-A Hack: Company Statement as Investigation Continues
The Triple-A hack is still unfolding, and the loss total keeps growing. According to monitoring from on-chain analyst Specter, roughly 31 hours after the first large-scale abnormal outflow from Triple-A's wallets, new deposits continued arriving and were subsequently drained as well. Specter reported an additional $1.8 million in assets flowing out from the Bitcoin and TRON networks, bringing cumulative losses to approximately $11.8 million.
Source: X(formerly Twitter)
How Losses Grew Past $11.8 Million
The incident was first flagged on July 24–25, when Specter identified suspicious outflows from Triple-A's hot wallets spanning multiple blockchains, including TRON, Ethereum, TON, and Solana. Security firm PeckShield amplified the alert shortly after. At that stage, more than $9.3M had reportedly been removed, swapped on decentralized exchanges, and bridged to Ethereum, with figures from various trackers ranging up to $9.7M as additional transfers were identified. The stolen assets were consolidated into a single Ethereum address holding roughly 5,227 ETH.
What makes this incident notable beyond the initial breach is that it didn't stop there. Specter flagged that deposits into the affected wallets were not disabled, meaning new funds continuing to arrive were swept out almost as quickly as they came in — a detail that suggested, at least initially, the company hadn't yet contained the exposure. That pattern continued into the following day, with the newly reported $1.8M outflow from Bitcoin and TRON pushing the cumulative total to around $11.8M.
What the Company Has Said So Far
Triple-A, a Singapore-based fiat-to-crypto payment gateway regulated as a Major Payment Institution by the Monetary Authority of Singapore and recently authorized in the EU and Dubai, has said customer funds remain unaffected by the incident. A company spokesperson told media outlets the firm is actively investigating and will share a formal update as soon as possible, characterizing the drained wallets as not holding customer deposits.
That statement, if accurate, implies the affected funds were operational or treasury-related rather than client-held balances — though Triple-A has not yet disclosed which wallet tier was compromised, how the attacker gained access, or what remediation steps have been taken. The company also hasn't confirmed whether any customer-facing services were paused or disrupted during the ongoing drain.
Triple-A Hack: Part of a Brutal Month for Crypto Security
The Triple-A incident lands in the middle of an unusually rough stretch for crypto security. Just a day before the first Triple-A outflows were flagged, on-chain trackers logged three separate attacks on July 23 totaling $35.55 million, including a $24.15 million USDC loss at AFX Trade, a $7.55 million exploit of the Verus Ethereum bridge, and a $3.86 million token drain at B2 Network. Industry-wide, security researchers had already tallied roughly $75.87 million lost across 40 separate hacks in June alone.
Security analysts note that the Triple-A breach fits a recurring pattern: rather than a smart contract vulnerability, the root cause appears to be compromised hot wallet infrastructure — internet-connected wallets kept online for transaction speed, which trade security for convenience. That's a distinction worth understanding, since it points to key management and access control failures rather than a flaw in any specific blockchain or protocol.
Conclusion
The Triple-A hack has grown from an initial $9.3–9.7 million estimate to roughly $11.8 million as of the latest reporting, with deposits reportedly still being drained more than a day after the first alert. The company maintains customer funds are unaffected, but a full technical explanation from the company has yet to follow.
Disclaimer
This article is based on public monitoring report from Triple-A's own statements as of July 27, 2026. Figures are preliminary and may be revised as investigations continue. This is not financial or investment advice. Always refer to official Triple-A communications for the most current and authoritative information on this incident.
