Stablecoin payments company Triple-A confirmed that unauthorized access to its treasury wallets led to the loss of company-owned digital assets, while saying customer funds were not affected.

The Singapore-based firm said in an official statement that it detected the unauthorized access on Saturday and temporarily moved certain services into maintenance mode for about three hours while it secured the affected infrastructure. The company issued the statement on Monday.

Triple-A said it does not custody digital assets on behalf of customers and that client funds are kept separately in trust accounts with safeguarding institutions. That separation is central to how payment firms seek to limit customer exposure when an internal operational wallet is affected. As a result, the company said, customer funds were unaffected by the incident.

The firm did not disclose the amount of digital assets lost and did not provide details on how the treasury wallets were compromised. Onchain investigator Specter previously estimated the losses at about $11.8 million in an X post.

Triple-A said the financial impact was limited to specific operational accounts and would be absorbed through its treasury reserves. It added that all services had been restored, with transactions and settlements processing normally.

The company said it is working with cybersecurity specialists, blockchain forensics firms and authorities, including the Singapore Police Force, to investigate the incident, trace the assets and support recovery efforts. The next material updates are likely to center on the cause of the wallet compromise, whether any assets can be frozen or recovered, and whether investigators identify the parties behind the unauthorized access.