- Triple-A’s crypto wallet hack expanded to $11.8M as attackers drained additional deposits across multiple blockchain networks despite ongoing response efforts.
- Specter reported new Bitcoin and TRON losses while PeckShield traced stolen assets to one Ethereum wallet holding thousands of ETH.
- Triple-A confirmed customer funds remained unaffected while regulators require licensed providers to separate client assets from operational blockchain wallets securely.
Losses from the suspected compromise of Triple-A’s crypto wallets have increased to about $11.8 million as attackers continued draining newly deposited funds. According to onchain investigator Specter, the exploit expanded beyond the initial theft, with additional assets disappearing more than 31 hours after the first major suspicious transfers.
According to Specter, another $1.8 million was stolen across the Bitcoin and TRON networks, raising the total losses above earlier estimates. Previous reports linked the attack to Ethereum, TRON, Polygon, Arbitrum, Solana, and The Open Network. However, Bitcoin only appeared among the affected networks after the latest findings.
Blockchain security firm PeckShield also cited Specter’s investigation while tracking the incident. According to PeckShield, the stolen assets were consolidated into a single Ethereum wallet that temporarily held 5,226.67 ETH worth roughly $9.73 million. Besides that, Specter noted that new deposits were still reaching the compromised wallets, allowing the attacker to drain incoming funds continuously.
Also Read: Samsung Invests $408 Million in Upbit Parent Dunamu Amid Crypto Expansion
Triple-A says customer funds remain unaffected
Triple-A addressed the incident through a post on X, confirming that it had launched an investigation into the wallet compromise. The company stated that it would release a formal update after completing its review. Moreover, Triple-A emphasized that customer funds were not affected by the attack.
The company did not identify the assets stored in the compromised wallets. However, it reiterated that customer holdings remained protected. Triple-A operates under a Major Payment Institution license issued by the Monetary Authority of Singapore and processes stablecoin payments for merchants settling in local currencies.
Additionally, its European subsidiary, Paytop SAS, holds payment institution and crypto-asset service provider licenses in France. The company also maintains money services business registrations in the United States and Canada.
Singapore’s Payment Services Regulations require licensed digital payment token providers to separate customer assets from company holdings. Meanwhile, Triple-A has not yet published the promised incident report in its newsroom.
The incident adds to a growing list of major crypto security breaches, including AFX Trade’s recent $24.15 million loss through an Arbitrum bridge exploit. Additionally, the Verus-Ethereum bridge suffered another attack that resulted in losses of roughly $7.54 million.
Also Read: Bitcoin (BTC) Leads Crypto Market Gains as Ethereum (ETH) Outpaces Major Altcoins
