Triple-A Treasury Drained $11.8M Across Seven Chains in 31-Hour Attack
Singapore-based stablecoin payment gateway Triple-A suffered an estimated $11.8 million loss from its treasury wallets over a 31-hour period last weekend, with attackers draining funds across seven blockchain networks and consolidating them on Ethereum.
The breach occurred while merchant funds remained untouched in trust accounts held separately by the company as required by Singapore's regulatory framework.
According to on-chain investigator Specter, suspicious outflows first appeared at approximately 5:18 p.m. ET on Friday, July 24, with more than $9.3 million already drained, swapped, and bridged to Ethereum from wallets linked to Triple-A by the time of Specter's alert.
The company did not confirm the breach publicly until Monday, July 27, roughly 35 hours after the initial outflows.