Triple-A Wallet Breach: 5,280 ETH Drained Amidst Contained Incident

Woofun AI reports that Triple-A, a Singapore-based stablecoin payments firm, contained an incident involving unauthorized access to wallets holding its own digital assets, asserting that client money remained unaffected. The breach impacted specific operational accounts managed by Triple A Technologies Pte. Ltd., the company’s Singapore entity, while other group operations were declared unaffected.

The company has not disclosed the size of its treasury loss or explained how the wallets were accessed. Services were placed in maintenance mode for approximately three hours to secure infrastructure and run security checks, after which transactions and settlements resumed normally across all markets. The financial impact was limited to specific operational accounts and fully absorbed from treasury reserves. No asset list, wallet addresses, or loss figure were disclosed, though the firm stated it could meet its liabilities. The transfers establish the flow into the cited address but do not clarify when the unauthorized access began or the total loss. The company has not confirmed the address, identified the source wallets, or described their account roles and original assets before swaps and bridges.

The missing link means public flows do not contradict Triple-A's client-fund segregation claim but cannot independently verify it. Triple-A is working with cybersecurity and blockchain-forensics specialists, the Singapore Police Force, and other authorities to trace assets and support recovery. The two central unknowns remain the size of the treasury loss and the route by which the wallets were accessed.

Two central unknowns remain: the size of the treasury loss and the route by which the wallets were accessed.