Triple-A Payment Gateway Suffers $9.7 Million Hot Wallet Drain Across Multiple Blockchains

Singapore-based payments gateway Triple-A suffered a major security breach on July 24 and July 25, 2026, resulting in the drain of over $9.7 million from its hot wallets across multiple blockchains, including TRON, Ethereum, Polygon, and Arbitrum. Attackers consolidated the stolen assets into 5,227 ETH at a single Ethereum address. While on-chain analysts warned that active deposits were still being drained, Triple-A Head of Marketing Tatyana Chernov confirmed that customer funds were unaffected. The incident caps off a highly volatile week of crypto exploits that also hit AFX Trade, Verus, and B2 Network.

Triple-A hot wallet drain

• ▪The hot wallet drain affected assets across multiple blockchains, including TRON, Ethereum, Polygon, Arbitrum, Solana, and The Open Network (TON)
• ▪Triple-A Head of Marketing Tatyana Chernov stated that the firm is actively investigating the situation and confirmed that customer funds are not impacted
• ▪Singapore-based payments firm Triple-A suffered a security incident on July 24 and July 25, 2026, where attackers drained over $9.7 million from its hot wallets

Multichain fund consolidation

• ▪On-chain investigator Specter reported that Triple-A deposits remained active and newly deposited funds continued to be drained during the incident.
• ▪Attackers swapped the stolen assets and routed them through cross-chain bridges to consolidate 5,227 ETH, worth approximately $9.7 million, into a single Ethereum address beginning with 0x01F8

Triple-A regulatory licenses

• ▪Triple-A operates as a Major Payment Institution regulated by the Monetary Authority of Singapore.
• ▪Triple-A secured full Markets in Crypto-Assets (MiCA) authorization for digital asset services in the European Union in June 2026
• ▪Triple-A received in-principle approval from Dubai's Virtual Assets Regulatory Authority (VARA) on July 15, 2026, for broker-dealer services

Weekly crypto exploit pattern

• ▪The Verus Ethereum Bridge was drained of approximately $7.54 million in a malicious import exploit, and B2 Network suffered a $3.86 million token drain on July 23, 2026.
• ▪The Triple-A drain occurred during a week of significant crypto exploits, including a $24.15 million USDC drain from the AFX Trade Arbitrum bridge on July 23, 2026.