Wallets attributed to stablecoin payments firm Triple-A were drained of more than $9.7 million across TRON, Ethereum, Polygon and Arbitrum before the assets were routed to Ethereum.
Onchain analyst Specter traced the multichain outflows and linked the affected wallets to Triple-A. The stolen assets were moved through cross-chain bridges and consolidated into 5,227 ETH at an Ethereum address beginning with 0x01F8 and ending with 53b1.
The transfers converged on the address after funds moved out of wallets on all four networks. The affected wallet roles, ownership of the drained balances and any exposure involving merchant settlement funds remain unconfirmed.
No technical analysis has identified whether the transfers followed a private-key compromise, stolen signing credentials or another breach of Triple-A’s wallet infrastructure.
Triple-A Has Not Confirmed The Loss
Triple-A had not published a security notice or acknowledged the wallet movements at publication. The company also had not announced a suspension of payments, withdrawals or settlement services.
The Singapore-based company provides infrastructure allowing businesses to collect and send payments using stablecoins and local currencies. Its platform handles conversion and settlement without requiring merchants to manage crypto assets directly.
Triple-A operates as a Major Payment Institution regulated by the Monetary Authority of Singapore and secured full MiCA authorization for digital asset services in the European Union last month. It also received in-principle approval from Dubai’s VARA on July 15 for broker-dealer services.
The company has not said whether the affected addresses were used for treasury management, payment processing, customer deposits or internal liquidity operations.
Drain Extends Week Of Crypto Losses
The Triple-A transfers follow three attacks disclosed earlier in the week involving bridges and project-controlled wallets.
AFX Trade lost 24.15 million USDC from its Arbitrum bridge after an unauthorized withdrawal cleared its validator threshold and dispute window. The attacker bridged the funds to Ethereum and exchanged them for approximately 12,467 ETH.
The Verus Ethereum Bridge was then drained of approximately $7.54 million through a malicious import that released assets without matching deposits on the Verus network. A separate 8.59 million B2 token drain was valued near $3.86 million before the assets were sold on BNB Chain.
Triple-A had not identified the compromised wallet tier, issued customer instructions or disclosed a recovery process at publication.