Triple-A, a Singapore-based fiat-to-crypto payment gateway licensed in multiple jurisdictions, has become the latest victim of a multimillion-dollar security breach, with attackers draining more than $9.7 million from its hot wallet infrastructure across at least six blockchain networks.

Blockchain security firm PeckShield reported that the exploit targeted Triple-A's hot wallets, affecting Ethereum, Solana, TRON, TON, Polygon, and Arbitrum. Hot wallets, which remain internet-connected to enable real-time transaction processing for customers, are a common attack surface across the crypto industry because they require online private keys, unlike cold storage wallets that hold reserves offline. The stolen funds were subsequently swapped on decentralized exchanges and bridged to Ethereum, where the attacker consolidated the assets into a single wallet.

Attack Details

According to PeckShield's investigation, the attacker stole over $9.7 million worth of cryptocurrency before swapping the assets and bridging them to Ethereum. The use of decentralized exchanges and cross-chain bridges to launder proceeds is a well-documented tactic in crypto exploits, as these tools can complicate tracing and recovery efforts. Blockchain records show the wallet currently holds 5,226.66 ETH, valued at approximately $9.72 million.

The majority of the stolen funds were transferred on July 24 and July 25, 2026. The largest single transaction moved 4,140 ETH into the attacker's wallet. Additional deposits included 615 ETH, 157 ETH, 112 ETH, 100 ETH, 72 ETH, and 23 ETH. After receiving these transfers, the attacker consolidated the funds into a single Ethereum wallet identified as 0x01F…253b1.

Security researchers believe the attacker first gained control of Triple-A's internet-connected hot wallets, which are commonly used to process customer payments quickly. After gaining access, the hacker focused on stealing stablecoins and other liquid assets, then rapidly swapped them on decentralized exchanges before bridging the proceeds to Ethereum.

#PeckShieldAlert Specter has reported that @TripleAHQ wallets appear to have been drained of more than $9.7M worth of crypto across multiple chains, including #TRON, #Ethereum, #Polygon, and #Arbitrum. The exploiter bridged the stolen funds to Ethereum. 5,227 $ETH is currently… pic.twitter.com/JxCr79V2db
— PeckShieldAlert (@PeckShieldAlert) July 25, 2026

No Official Response

As of publication, more than eight hours after the incident was identified, Triple-A had not released an official statement explaining the breach or confirming the exact cause of the exploit.

Security experts note that companies handling large amounts of customer funds should strengthen wallet management, improve private key protection, and reduce the amount of assets kept online to limit potential losses from similar attacks. The incident adds to a broader pattern of hot wallet compromises across the crypto sector, where payment processors and exchanges balancing transaction speed against security remain frequent targets.