Triple-A Treasury Breach Leaves Client Funds Intact

The security breach triggered a three-hour maintenance window as engineers worked to secure the company’s infrastructure. Triple-A stated that its business model prevents the commingling of corporate and client capital, as customer holdings are stored in separate trust accounts with third-party safeguarding institutions. These external accounts were not compromised during the incident.

Financial losses stemming from the breach will be absorbed by the company’s internal treasury reserves. Despite the significant outflow of assets, the firm maintains it remains well-capitalized and capable of meeting all outstanding liabilities. The company is currently cooperating with cybersecurity experts and the Singapore Police Force to track the stolen funds, which were traced across multiple chains including Ethereum, Solana, TRON, and TON before being consolidated on the Ethereum network.

Public awareness of the incident began when blockchain investigator Specter flagged suspicious activity involving Triple-A’s wallets, reporting that attackers had swapped and bridged assets to a centralized address. Triple-A has not yet provided specific details regarding the breach vector—such as whether the incident involved compromised credentials or a structural vulnerability—stating only that the investigation is ongoing. The event highlights a volatile year for digital asset security, with researchers tracking over $630 million in cumulative losses across the industry during the first seven months of 2026.