Singapore-based cryptocurrency payments company Triple-A has confirmed that it recently experienced unauthorized access to several of its corporate treasury wallets. Despite the security incident, the company emphasized that customer funds were never at risk and that all payment services are now operating normally.
The announcement comes after blockchain investigators identified suspicious on-chain activity linked to wallets associated with the company, prompting speculation about the scale of the incident.
Unauthorized Access Detected
According to Triple-A, the security breach was discovered on July 25, after unauthorized activity was detected within several wallets holding the company's own digital assets.
As a precaution, the company temporarily placed certain services into maintenance mode for approximately three hours while engineers secured the affected infrastructure and completed additional security reviews.
Following those checks, all payment services were restored, and the company confirmed that transactions and settlements continue to operate normally across every market where it provides services.
Customer Funds Were Not Affected
Triple-A stressed that the attack involved only corporate treasury assets.
The company explained that it does not provide cryptocurrency custody services, meaning customer assets are stored separately in protected trust accounts maintained by independent safeguarding institutions.
Because of this structure, client funds remained isolated from the compromised wallets and were never exposed during the incident.
Triple-A also stated that it remains financially stable and has sufficient reserves to fully absorb the losses without affecting customers or business operations.
Investigation Into the Attack Continues
The exact cause of the breach has not yet been disclosed.
Triple-A has not confirmed whether the unauthorized access resulted from compromised credentials, infrastructure vulnerabilities, or another attack method.
To support the investigation, the company is working with blockchain forensic specialists, cybersecurity experts, and law enforcement authorities, including the Singapore Police Force.
The investigation is focused on identifying the attackers, tracing the stolen digital assets, and exploring possible recovery options.
Blockchain Investigators Report Significant Losses
Before Triple-A officially confirmed the incident, blockchain analysts had already detected unusual movements involving wallets connected to the company.
Initial estimates suggested that more than $9 million in cryptocurrency had been transferred from the affected wallets. As additional transactions were identified, researchers increased their estimates, with some later suggesting that total losses may have reached approximately $11.8 million.
Triple-A has not publicly confirmed the exact amount of cryptocurrency that was stolen.
Investigators also reported that many of the transferred assets were moved across multiple blockchain networks before eventually being converted into Ethereum (ETH).
Crypto Security Challenges Continue in 2026
The incident adds to a growing number of cybersecurity attacks affecting cryptocurrency companies and decentralized finance platforms throughout 2026.
Blockchain security researchers have identified hundreds of millions of dollars in digital assets lost this year through exchange breaches, protocol vulnerabilities, compromised credentials, and cross-chain infrastructure attacks.
The increasing sophistication of these attacks continues to encourage cryptocurrency companies to invest heavily in security monitoring, infrastructure protection, and blockchain forensic capabilities.
Triple-A Continues Normal Operations
Despite the breach, Triple-A says its business operations remain unaffected.
The company confirmed that payment processing, settlements, and merchant services continue to function without interruption, while additional security measures have been implemented to strengthen its infrastructure against future threats.
Triple-A also reaffirmed its commitment to maintaining transparency throughout the investigation and promised to provide further updates as more information becomes available.
Why This Matters
The latest incident highlights the importance of separating customer assets from company-owned operational funds.
Although the attack resulted in losses for Triple-A's treasury, the company's custody model ensured that client funds remained fully protected.
As cryptocurrency adoption continues to expand globally, strong security practices and clear asset segregation are becoming essential standards for payment providers and digital asset companies.
