Triple-A hot wallet losses climb to $11.8 million as new deposits keep being swept: report
Onchain investigator Specter said crypto payments firm Triple-A hot wallet losses rose to about $11.8 million, up from $9.3 million Friday, with additional $1.8 million taken across Bitcoin and TRON. Specter and PeckShield cited drains and swaps to Ethereum. Triple-A said it is investigating and customer funds are not affected.
How this was made
The 30-second read
Why it matters
The report provides an updated, time-stamped estimate of losses and indicates the attacker continued draining even after the initial flag, increasing near-term uncertainty for crypto custody and payments operators. It also identifies a specific Ethereum address holding a large ETH balance, which can guide monitoring of potential liquidation or further transfers.
Market read
Traders may treat this as a continuing operational-risk event with ongoing sweeps, using the disclosed address and cross-chain scope to monitor follow-on flows and sentiment toward custody/payment infrastructure.
What to watch
The article does not disclose what assets were in the affected wallets or whether the attacker’s activity is slowing; without asset-level breakdowns by network, price impact may be overstated.
Background
Triple-A is a Singapore-licensed payments firm processing stablecoin payments, with MAS rules requiring customer assets to be safeguarded in trust accounts separate from firm holdings.
Ticker impact
The proceeds were pooled at a single Ethereum address holding 5,226.67 ETH worth about $9.73 million, making ETH a direct affected asset.
Potential short-term volatility around exchange/bridge risk sentiment, but no direct causal link to ETH price is established in the article.
The article provides concrete ETH amounts and an address holding value, but it does not state market-wide impact or ETH price reaction.
Earlier reports cited by Specter and PeckShield covered Solana among the affected networks, linking SOL to the incident’s cross-chain scope.
Limited, mostly sentiment-driven impact unless follow-on reporting quantifies SOL-specific losses or wallet addresses.
The article mentions Solana as previously covered but does not provide new SOL loss figures in this update.
Earlier reports cited in the article included Arbitrum among affected networks, tying ARB to the broader cross-chain compromise narrative.
Minimal incremental impact from this article alone.
The newest quantified update is across Bitcoin and TRON; Arbitrum is mentioned without new ARB figures.
Specter says an additional $1.8 million was taken across Bitcoin and TRON networks, making BTC a directly affected asset in the update.
Short-term risk-off sentiment for custody/bridge activity is possible, but the article does not quantify BTC-only losses.
The text provides an incremental cross-network theft figure including Bitcoin, but lacks BTC-specific breakdown or market reaction.
Market effects
Highlights ongoing hot-wallet drain risk and the possibility of continued inflows being swept, which can pressure sentiment toward crypto payments and custody operators.
No direct regional market impact beyond Singapore-regulated payments context.
Cross-chain theft narrative can spill over to broader bridge and custody risk premia across major crypto assets.
Counterpoint
Triple-A states customer funds are not impacted, so the market may be overpricing the incident if the drained wallets were segregated or limited to operational balances.
Key entities
- companyTriple-A
Crypto payments firm whose hot wallets were reportedly compromised; it says customer funds are not affected.
- onchain investigatorSpecter
Reported the growing loss estimate and described cross-chain swaps and bridging.
- blockchain security firmPeckShield
Raised the figure and provided an alert with the pooled Ethereum address screenshot.
- regulatorMonetary Authority of Singapore (MAS)
Sets safeguarding guidance for licensed digital payment token service providers.
