Triple-A Suffers Unauthorized Access to Hot Wallets
Triple-A experienced unauthorized access to its hot wallets, resulting in significant asset loss. Client funds were not affected, and services have been restored after security checks.
On July 24, 2026, Singapore-based stablecoin payments firm Triple-A reported unauthorized access to its hot wallets across multiple chains. Attackers drained approximately $9.7 million to $11.8 million in company-owned digital assets, which were then swapped and consolidated to a single Ethereum address.
Despite the loss of company assets, client funds remained unaffected as they were held in separate trust accounts. Following the incident, Triple-A paused its services for security checks, which have since been completed, and services have been fully restored.
Sources
- Source reportrestates another report