What to know:
- Triple-A says customer funds stayed safe during unauthorized access to treasury wallets.
- Specter estimates losses near $11.8 million, but Triple-A has not confirmed the amount.
- Singapore police and cybersecurity experts trace assets and support recovery efforts.
Triple-A wallet breach exposed company-owned digital assets after unauthorized access to the firm’s treasury wallets. The Singapore-based payments provider detected the incident on Saturday. On Monday, it said that customer funds were not affected and remained separate from the compromised infrastructure.
The company placed certain services in maintenance mode after discovering the access. The maintenance period lasted about three hours. During that time, its teams secured the affected infrastructure.
Also Read: Coinbase AiFi Could Drive Crypto Growth as AI Adoption Accelerates
What the Triple-A Wallet Breach Revealed About Lost Assets
Triple-A said that it does not keep digital assets for its customers. Funds belonging to clients are stored in trust accounts with safeguarding firms. This structure prevented the Triple-A wallet breach from affecting customer funds.
Blockchain researchers discovered suspicious transactions over the weekend before the company’s announcement.
The transactions included numerous wallets associated with Triple-A. At first, it was not clear if the stolen assets were the property of the company, customers, or the recipients of payments.
On-chain investigator Specter initially estimated that more than $9.3 million had left the linked wallets. Later, the figure increased to over $9.7 million following the discovery of new transactions.
Specter estimated the possible losses around $11.8 million; however, the company did not confirm this amount yet.
The amount of lost funds in connection with the wallet hack has not been disclosed by Triple-A. Its update described the assets as belonging to the company as treasury holdings.
Who Is Investigating the Triple-A Wallet Breach
However, the corporation has not explained how the breach happened. At the moment, it is unclear what type of credentials or other mechanisms the hackers used to access their data.
According to the company, it is working with its internal security teams as well as external cybersecurity firms. The blockchain forensics experts, authorities, and the Singapore Police Force will also be involved. They are conducting an investigation on the Triple-A wallet breach.
At the moment, The company gave no deadline for completing the investigation or publishing further findings.
Moreover, the company did not mention if some of the assets had already been frozen or recovered. Apparently, the investigation includes both tracing and recovery of assets.
What Drove DeFi Attack Losses Above $630M
The incident follows a similar case that happened last week at the DeFi protocol Lien Finance. As a result of the attack, it lost 542,144.63 USDC due to the vulnerability in its bond validation and pricing logic.
According to SlowMist, the flaws in the code allowed for creating unsupported bond tokens and exchanging them for USDC without any collateral.
According to researchers, in the first seven months of 2026, DeFi attacks have led to the loss of more than $630 million.
Common methods included oracle manipulation, pricing vulnerabilities, credential compromise, and weak bridge validation. The Triple-A wallet breach joins that broader series of crypto security incidents.
Also Read: Strategy Bitcoin Holdings Stay Unchanged as Michael Saylor Teases Next Move
Be the first to comment