Breaches and incidentsBriefConfirmed by two or more outlets
Triple-A: crypto payment firm’s treasury hot wallets drained
First flagged 24 Jul 2026. Losses estimated at about USD 11.8M (Specter), up from USD 9.3M; PeckShield put it above USD 9.7M.
- Disclosed
What happened
- First flagged 24 Jul 2026. Losses estimated at about USD 11.8M (Specter), up from USD 9.3M; PeckShield put it above USD 9.7M. Chains: Ethereum, Tron, Polygon, Arbitrum, Solana, TON, and Bitcoin.
- Root cause: not disclosed. Triple-A said it identified unauthorized access to wallets holding the company’s own assets and that “customer funds are not impacted”.
- Attribution: none.
- Response: Triple-A is investigating. New deposits were still being swept about 31 hours after the first outflows. Scorechain reported about USD 9.87M sitting as DAI in one wallet.
Sources
- https://theblock.co/news/defi/2026-07-26-triple-a-hot-wallet-losses-climb-to-11-8-million-as-new-deposits-keep-being-swept-report-409678
- https://www.scorechain.com/blog/triple-a-hack-11-8m-treasury-breach-onchain-trace
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.