Singapore-based stablecoin payments firm Triple-A has confirmed that unauthorized access to its treasury wallets resulted in a major compromise of company-owned digital assets. The security incident was detected on July 25, prompting the platform to temporarily place certain operational services into maintenance mode for approximately three hours while engineers secured the affected infrastructure.
While Triple-A did not officially disclose the exact financial figure, on-chain investigator Specter estimated total losses at roughly $11.8 million, noting that stolen funds were bridged across chains to Ethereum. The company emphasized that client funds were completely unaffected by the breach. Triple-A does not custody digital assets directly on behalf of customers, instead maintaining client funds separately in trust accounts managed by regulated safeguarding financial institutions.
The financial impact of the exploit is strictly limited to specific company operational accounts and will be absorbed entirely through internal corporate treasury reserves rather than affecting customer balances in any way. Following the brief three-hour operational shutdown, all platform services, merchant transactions, and global settlements have been fully restored and are operating normally.
Triple-A stated it is collaborating closely with cybersecurity specialists, blockchain forensics experts, and law enforcement authorities, including the Singapore Police Force, to investigate the attack vector, trace the stolen assets, and support potential recovery efforts. The security breach highlights ongoing vulnerability risks facing digital asset payment infrastructure, even as robust institutional safeguarding structures successfully isolate retail and client funds from corporate treasury exposures.
