Triple-A’s hot wallets reportedly lost over $9.7 million in a suspected exploit stretching across several blockchain networks. The attacker appears to have swapped and consolidated the stolen assets in Ethereum, collecting around 5,226.66 ETH.

Details of the Incident

On-chain analyst Specter first detected unusual transactions from hot wallets tied to Triple-A, a Singapore-based stablecoin payment provider. Initial estimates reported $9.3 million moved across Ethereum, Solana, TRON, and TON blockchains. Subsequent investigations by blockchain security firm PeckShield raised the figure to above $9.7 million. Activity seems ongoing, with funds being drained and bridged to Ethereum.

Further reports suggested that wallets on Polygon and Arbitrum might also be involved, potentially expanding this to six networks. Despite these findings, Triple-A has yet to publicly confirm the hack or disclose whether client funds have been impacted. The exact method of access remains unclear, and without a confirmed statement, this remains a suspected hot-wallet breach rather than a confirmed protocol-level exploit.

Where the Stolen Funds Went

Experts tracking the blockchain found the stolen tokens were swapped and moved to Ethereum, likely to simplify handling diverse assets. The consolidated Ethereum address currently holds approximately 5,226.66 ETH, nearly $9.7 million at the time. No links between this address and known previous exploits have been publicly confirmed, nor has there been evidence showing the funds moved through exchanges or mixers after arriving.

The evolving valuation of Ethereum and ongoing transfers might explain the slight difference between initial and updated loss estimates. This incident highlights the risks facing crypto custodians managing hot wallets across multiple chains.

This article is for informational purposes only and does not constitute financial advice.