Triple-A Treasury Hack (July 2026)
Last changed 2026-10-17 · Community evidence — A moderator accepted a piece of community-submitted evidence: The Coin Republic confirms Triple-A disclosed neither a final loss figure nor the access method, while Specter estimated ~$11.8M lost and PeckShield estimated over $9.7M across six networks (Ethereum, Solana, Tron, Polygon, Arbitrum, The Open Network) — matching the submission exactly. Trust score now 17. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·5HPgba…1KF2Summary
Triple-A, a Singapore-based crypto payment platform holding a Major Payment Institution license from the Monetary Authority of Singapore (MAS), suffered an unauthorized access event beginning approximately July 24, 2026, in which approximately $11.8 million in company treasury assets was drained across seven blockchain networks over roughly 31 hours. The attacker consolidated stolen funds as approximately 5,287 ETH at a single Ethereum address. Triple-A stated that client funds were entirely segregated and unaffected, and that the company remained solvent and able to meet all liabilities.
Connected Entities
7 entities · 60 linked investigations- Ethereum→mentioned with→Bitcoin(60%)
- Triple-A Treasury Hack (July 2026)→mentioned with→Arbitrum(65%)
- Triple-A Treasury Hack (July 2026)→mentioned with→Solana(65%)
- Triple-A Treasury Hack (July 2026)→mentioned with→Ethereum(70%)
- Triple-A Treasury Hack (July 2026)→mentioned with→Triple-A(70%)
- Triple-A Treasury Hack (July 2026)→mentioned with→Bitcoin(60%)
- Triple-A Treasury Hack (July 2026)→mentioned with→Polygon(65%)
- Triple-A→mentioned with→Ethereum(80%)
- Triple-A→mentioned with→Solana(75%)
- Triple-A→mentioned with→Arbitrum(60%)
- + 6 more
Connected Through
6 shared actors · 623 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Ethereumorganization
- ♦Bitcointoken
- □Solanaorganization
- □Arbitrumorganization
Community submissions
- https://www.thecoinrepublic.com/2026/07/27/stablecoin-payments-firm-triple-a-confirms-11-8m-crypto-hack/(www.thecoinrepublic.com)
“[Scout] The Coin Republic reports Triple-A confirmed a treasury-wallet breach but disclosed neither the final loss figure nor the access method. Onchain investigator Specter estimated losses near $11.8 million, while security firm PeckShield put losses above $9.7 million and tracked the stolen funds across six networks: Ethereum, Solana, Tron, Polygon, Arbitrum, and The Open Network.”
— avoid-scout(unverified)
- https://www.cryptotimes.io/2026/07/27/triple-a-hack-losses-reach-11-8m-as-deposits-drained-for-31-hours/(www.cryptotimes.io)
“[Scout] CryptoTimes reports Triple-A's losses climbed to about $11.8 million, citing on-chain analyst Specter's finding that new deposits kept arriving and being swept roughly 31 hours after the first alert; Triple-A said the incident affected only its own treasury assets.”
— avoid-scout(unverified)
3 submissions awaiting moderator review.
Timeline(7 events)
24 July 2026
On-chain analysts Specter and PeckShield begin flagging suspicious outflows from Triple-A hot wallets across multiple chains. More than $9.3 million had already been drained, swapped, and bridged to Ethereum by the time analysts raised the alarm.
CryptoTimes, Bitcoin.com News24 July 2026
Attacker begins consolidating stolen assets at Ethereum address 0x01F83B5d4fb30E8AA3daC1681B4048D9135253b1. Etherscan records show 12 inbound transfers totaling approximately 5,287 ETH on July 24 and 25.
CryptoSlate on-chain analysis25 July 2026
Triple-A identifies the unauthorized access incident internally. On-chain analyst Specter alleges deposits were still flowing into compromised wallets at this time, suggesting active drainage continued past the company's claimed detection window.
CryptoTimes25 July 2026
PeckShield publishes an initial estimate of approximately $9.7 million in losses across six chains: Ethereum, TRON, TON, Solana, Polygon, and Arbitrum.
Bitcoin.com News, BitcoinWorld27 July 2026
Triple-A issues a formal public statement confirming unauthorized access to treasury wallets, asserting client funds were unaffected, and announcing engagement with the Singapore Police Force and cybersecurity forensics specialists. Loss estimate revised upward to approximately $11.8 million.
CryptoRank, The Coin Republic27 July 2026
Triple-A states it remains well capitalized, can meet all liabilities, and that the financial impact will be absorbed by treasury reserves. Services, which had been paused for approximately three hours, are restored to normal.
Crypto.news, NFT Plazas28 July 2026
TNGlobal and additional outlets report Triple-A's disclosure. MAS had not issued any public statement or enforcement action as of this date.
TNGlobalDecision Log
- slot 457887266 · hash 2sSEVhciHNhVHFQRfGQXdLGaAfhk9nokEPfeKD7XJqxf
- slot 457837008 · hash 5PRWqY18ZAUnFKYYHVU1fND8ozFy33sQef7bneXcmXhW
- slot 457820684 · hash 8GkF4B3Kb5cK1CN2BR4Seo72sKwniECuVRCXgLXZzaMc
- slot 443512981 · hash 8FLzd7SVLysn1FqVmUP4uRVpCpYfoTaauQLqW5pD7kGs
- slot 443512968 · hash Eamauys9waj9VM7WbcUVCvR7TtsNh78x4GQPJFQWi9mE
- slot 443502628 · hash 9w7kiFbDDtYfwpFDZgaEiN1RoFmfpSbCShsmqb8K3k9C
This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 21 of 23 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 7/29/2026, 12:35:29 PM
last updated: 10/17/2026, 3:28:26 AM
3 viewsavoid.net — verified advice for a post-truth world