Triple-A, a cryptocurrency payment protocol that enables businesses to send and receive payments globally, has suffered a major exploit resulting in losses exceeding $9.70 million across multiple blockchain networks.

According to blockchain security firm PeckShieldAlert, attackers drained Triple-A wallets across four chains: TRON (TRX), Ethereum (ETH), Polygon (POL), and Arbitrum (ARB). The fact that funds were compromised simultaneously across four separate networks suggests a broader private key or access-control failure rather than a vulnerability in any single chain's smart contracts. The full extent of the losses may still be growing.

Attack Details

The exploiter bridged stolen funds from Arbitrum to Ethereum, a pattern observed in numerous previous hacks. Cross-chain bridging is frequently used by attackers to consolidate and move illicit proceeds, as it can complicate tracing efforts across ecosystems with different monitoring tools. All consolidated funds are currently held in a single Ethereum address containing 5,227 ETH, valued at approximately $9.696 million.

The Arbitrum bridge has been implicated in multiple recent exploits, continuing a trend observed across the decentralized finance sector.

Triple-A's Response

Triple-A had not publicly acknowledged the attack at the time of reporting. Deposits remained active, and additional funds continued to be drained — a scenario consistent with hot wallet custody failures, where wallets connected to the internet for operational liquidity remain exposed even as an attack is underway. The failure to pause deposits during an active drain has been a recurring factor amplifying losses in past protocol incidents.

Users across social media platforms criticized the Triple-A team's silence, though some community members speculated that the fund movements could potentially be the work of an internal developer rather than an external attacker. No official confirmation of either scenario has been issued.

Broader Context: Crypto Hacks Accelerate in July

The Triple-A exploit follows a series of significant attacks across the cryptocurrency ecosystem. Two days earlier, three separate exploits targeted BSquared Network, AFX Trade, and the Verus-Ethereum bridge, collectively resulting in approximately $35 million in losses.

According to data from DefiLlama, total hacked capital for the week has reached $41.83 million. Bonzo Lend recorded the largest single loss this week at approximately $10.05 million.

Year-to-date figures underscore the escalating trend. Over the past 90 days, approximately $264 million has been stolen across 94 separate exploits, averaging $2.90 million per day. So far in July, crypto losses to hacks have reached approximately $106 million, with nearly a week remaining in the month.

While some recovery efforts have proven successful, the majority of exploited funds remain unrecovered, leaving institutions and protocols to absorb the losses.

Summary

Triple-A lost at least $9.70 million to a multi-chain exploit affecting TRON, Ethereum, Polygon, and Arbitrum. The attacker consolidated stolen funds into a single Ethereum address holding 5,227 ETH ($9.696 million). The incident pushes the weekly total value hacked to $41.83 million and July's total to approximately $106 million.