Triple-A Treasury Hack (July 2026)
Summary
Triple-A, a Singapore-based crypto payment platform holding a Major Payment Institution license from the Monetary Authority of Singapore (MAS), suffered an unauthorized access event beginning approximately July 24, 2026, in which approximately $11.8 million in company treasury assets was drained across seven blockchain networks over roughly 31 hours. The attacker consolidated stolen funds as approximately 5,287 ETH at a single Ethereum address. Triple-A stated that client funds were entirely segregated and unaffected, and that the company remained solvent and able to meet all liabilities.
Connected Entities
1 entities · 10 linked investigationsTimeline(7 events)
2026-07-24
On-chain analysts Specter and PeckShield begin flagging suspicious outflows from Triple-A hot wallets across multiple chains. More than $9.3 million had already been drained, swapped, and bridged to Ethereum by the time analysts raised the alarm.
CryptoTimes, Bitcoin.com News2026-07-24
Attacker begins consolidating stolen assets at Ethereum address 0x01F83B5d4fb30E8AA3daC1681B4048D9135253b1. Etherscan records show 12 inbound transfers totaling approximately 5,287 ETH on July 24 and 25.
CryptoSlate on-chain analysis2026-07-25
Triple-A identifies the unauthorized access incident internally. On-chain analyst Specter alleges deposits were still flowing into compromised wallets at this time, suggesting active drainage continued past the company's claimed detection window.
CryptoTimes2026-07-25
PeckShield publishes an initial estimate of approximately $9.7 million in losses across six chains: Ethereum, TRON, TON, Solana, Polygon, and Arbitrum.
Bitcoin.com News, BitcoinWorld2026-07-27
Triple-A issues a formal public statement confirming unauthorized access to treasury wallets, asserting client funds were unaffected, and announcing engagement with the Singapore Police Force and cybersecurity forensics specialists. Loss estimate revised upward to approximately $11.8 million.
CryptoRank, The Coin Republic2026-07-27
Triple-A states it remains well capitalized, can meet all liabilities, and that the financial impact will be absorbed by treasury reserves. Services, which had been paused for approximately three hours, are restored to normal.
Crypto.news, NFT Plazas2026-07-28
TNGlobal and additional outlets report Triple-A's disclosure. MAS had not issued any public statement or enforcement action as of this date.
TNGlobalDecision Log
- #1publish⛓ pending7/29/2026, 12:35:39 PMhash: 9w7kiFbDDtYfwpFDZgaEiN1RoFmfpSbCShsmqb8K3k9C
18 of 23 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 7/29/2026, 12:35:29 PM
last updated: 7/29/2026, 8:29:07 PM
avoid.net — verified advice for a post-truth world