Triple-A Suffers Suspected $9.7M Hot Wallet Exploit Across Four Chains

• Triple-A reportedly lost over $9.7M after attackers drained hot wallets across multiple chains.
• Stolen assets were swapped and bridged to Ethereum before consolidation into one wallet.
• Triple-A had not confirmed the breach or disclosed whether customer funds were affected.

Triple-A, a crypto payment infrastructure provider, has reportedly suffered a suspected hot wallet exploit that drained more than $9.7 million across multiple blockchain networks. 

Blockchain security firms and on-chain analysts said the stolen assets were swapped, bridged to Ethereum, and consolidated into a single wallet, while the company had not confirmed the incident at publication.

Security Researchers Trace Funds Across Multiple Networks

On-chain analyst Specter first identified suspicious transactions involving wallets linked to Triple-A. The analyst initially estimated losses exceeding $9.3 million before later updates pushed the suspected total above $9.7 million.

Blockchain security firm PeckShield later confirmed the findings. It reported that attackers drained crypto assets from hot wallets operating across TRON, Ethereum, Polygon, and Arbitrum. 

Earlier tracking also linked the suspicious activity to Solana and TON, suggesting the compromise affected multiple blockchain ecosystems.

According to investigators, the attacker rapidly swapped the stolen assets before bridging them to Ethereum. The funds were then consolidated into a single Ethereum address holding approximately 5,227 ETH, valued at roughly $9.7 million during the incident.

#PeckShieldAlert Specter has reported that @TripleAHQ wallets appear to have been drained of more than $9.7M worth of crypto across multiple chains, including #TRON, #Ethereum, #Polygon, and #Arbitrum.

The exploiter bridged the stolen funds to Ethereum. 5,227 $ETH is currently… pic.twitter.com/JxCr79V2db

— PeckShieldAlert (@PeckShieldAlert) July 25, 2026

Security researchers also identified several additional wallet addresses connected to the transfers. However, they have not publicly attributed the attack to any known hacking group or linked the destination wallets to previous exploits.

Triple-A had not issued an official statement when reports emerged. The company also had not confirmed whether customer funds, business reserves, or operational assets were affected by the suspected compromise.

Incident Adds to Growing Series of Crypto Security Breaches

The suspected exploit highlights ongoing security challenges surrounding hot wallets, which remain connected to the internet for faster transaction processing. While these wallets improve payment efficiency, they also present larger attack surfaces than offline storage solutions.

Researchers believe the attacker likely gained unauthorized access to Triple-A’s hot wallet infrastructure before moving liquid assets through decentralized exchanges. Consolidating the proceeds into Ethereum may simplify future transfers while making asset management easier for the attacker.

The difference between the initial $9.3 million estimate and the later $9.7 million figure may reflect additional transfers recorded after the first alert. It may also result from changes in Ethereum‘s market value during the investigation.

The incident follows several major crypto exploits reported this week, including attacks targeting AFX Trade, the Verus Ethereum Bridge, and B2 Network. 

Although investigators have found no evidence connecting those incidents, the latest attack reinforces growing concerns over cross-chain security and digital asset custody.

Triple-A is expected to provide additional details after completing its internal investigation. 

Until then, the exact cause of the suspected exploit and the total financial impact remain unconfirmed.