Image credit: Shutterstock
Stablecoin payments company Triple-A has confirmed that an attacker gained unauthorized access to wallets holding its own digital assets.
On-chain investigator Specter estimates the losses at about $11.8 million. Triple-A said customer funds were not exposed because they were held separately from the affected treasury infrastructure. The company has restored its services and said its reserves will absorb the loss.
Triple-A Detected Unauthorized Wallet Access on July 25
The Singapore-based company identified the unauthorized wallet access on July 25. It placed some services into maintenance mode for about three hours while it secured the affected infrastructure and completed internal checks.
Triple-A said the breach was confined to operational accounts containing company-owned assets. It does not hold customers’ digital assets in those wallets.
Customer Funds Remained Separate From Breached Wallets
Triple-A said client funds are held separately in trust accounts maintained with safeguarding institutions that were not exposed. The company said it remains able to meet its financial obligations.
Transactions and settlements have resumed across its markets, with customer funds unaffected, according to the company. That distinction keeps the incident focused on Triple-A’s own treasury assets rather than merchant or client balances.
Loss Estimate Rose From $9.3M to $11.8M
Specter initially estimated that about $9.3 million had been removed from Triple-A-linked wallets. PeckShield later raised the tracked total above $9.7 million after identifying transfers across Ethereum, Solana, TRON, TON, Polygon and Arbitrum.
Specter said additional Bitcoin and TRON deposits were later swept from affected addresses, lifting the estimate to roughly $11.8 million. Some funds continued reaching the wallets after the first suspicious transactions and were later moved by the attacker.
Stolen Assets Were Consolidated on Ethereum
Investigators tracked swaps and cross-chain transfers that consolidated much of the stolen value on Ethereum. Triple-A has not confirmed the final loss amount.
It also has not disclosed which credentials, systems or wallet-management controls were compromised. That leaves the $11.8 million figure as an on-chain estimate rather than a company-confirmed loss total.
Singapore Police Join Investigation and Recovery Effort
Triple-A is working with cybersecurity specialists, blockchain forensics firms and law enforcement agencies, including the Singapore Police Force. The investigation will focus on identifying the source of the unauthorized access, tracing the stolen assets and supporting recovery efforts.
The company has not said whether any funds have been frozen or recovered. It also has not released a technical incident report detailing the attack method or the security changes made after the breach.
Further updates will depend on the forensic investigation and asset-tracing process. For customers and merchants, payment processing has returned to normal while Triple-A covers the loss from its own treasury reserves.
