Triple-A finds its hot wallets drained across six chains

Triple-A, a Singapore-based payments company, detected a compromise of hot wallets holding its own digital assets. On-chain trackers put the initial loss near $9.7 million, with later tracking reaching about $12 million as further movements were attributed to the same attacker.

The drain touched wallets on Ethereum, TRON, Polygon, Arbitrum, Solana and TON, a spread that points at compromised wallet infrastructure rather than a flaw in any one chain's contracts. Attackers obtained unauthorised administrative access and did not execute a single sweep: they retained that access and continued moving assets after the first alerts fired. Proceeds were swapped and bridged to Ethereum, consolidating into an address holding roughly 5,227 ETH.

The company said it can meet all of its liabilities.

An attacker who keeps access after detection is the expensive case: the loss is bounded by how fast credentials are rotated rather than by how fast a contract can be paused.