Crypto payments company Triple-A lost more than $9.7 million from its hot wallets this week, with attackers draining funds across four blockchains before the firm appeared to notice. On-chain analyst Specter flagged the outflow on X, pointing out that Triple-A's team hadn't disabled deposits — meaning fresh incoming funds were being swept up too.
How the drain unfolded
The attack hit hot wallets on TRON, Ethereum, Polygon and Arbitrum. Specter tracked the stolen assets as the hackers swapped them and bridged the proceeds to Ethereum. The funds now sit in wallet 0x01F83B5d4fb30E8AA3daC1681B4048D9135253b1, which holds roughly 5,227 ETH, worth about $9.7 million at current prices.
Team appeared unaware
Specter noted that Triple-A's team seemed to have no idea the breach was happening. Deposits weren't paused, and new money flowing in was being drained in real time. That suggests the attackers still had access when the analyst went public. Triple-A had not addressed the wallet outflows as of press time.
A rough July for crypto security
The Triple-A incident adds to a series of exploits this month. On July 23 alone, Lookonchain reported three separate attacks that stole a combined $35.55 million. AFX Trade lost $24.15 million, the Verus Ethereum bridge was hit for $7.55 million, and B2 Network lost $3.86 million. The Verus bridge had already been exploited once before in May 2026, when about $11.58 million was taken.
Whether Triple-A will freeze the compromised wallets, alert customers, or detail how the attacker gained entry is still unclear. The company hasn't posted a statement on its website or social channels since the drain was spotted.
