Crypto payments firm Triple-A loses $9.7M+ from hot wallets on Ethereum, Solana, TRON and TON
Triple-A payment processor hot wallets
On Jul 24, 2026, on-chain analyst Specter flagged suspicious outflows from hot wallets of the crypto payment processor Triple-A, and PeckShield later estimated losses above $9.7 million. crypto.news lists Ethereum, Solana, TRON and TON as affected, with some reports adding Polygon and Arbitrum. The proceeds were gathered in an Ethereum address holding about 5,227 ETH. The cause had not been disclosed, and no evidence tied the breach to Triple-A's custody provider Fireblocks. Merchants and customers should rely only on Triple-A's official channels for updates.
Why this severity: $9.7M reported stolen, only partly contained.
- Started
- Jul 24, 2026
- Reported stolen
- $9.7M
At risk
- Triple-A payment processor hot wallets
- Solana wallets
- Ethereum wallets
- Tron wallets
What to do now
- Pause sending new funds to Triple-A deposit addresses until the company confirms its wallets are secure.
- Get updates only from Triple-A's official site and accounts. Ignore DMs offering refunds or asking you to 're-verify' wallets.
Stay safe
Am I affected?
The drained funds came from Triple-A's own hot wallets. If you are a merchant or customer using Triple-A, check your account balance and settlement status in the official dashboard.
What to do now
- Pause sending new funds to Triple-A deposit addresses until the company confirms its wallets are secure.
- Get updates only from Triple-A's official site and accounts. Ignore DMs offering refunds or asking you to 're-verify' wallets.
How to avoid this
- Don't leave large balances with payment processors; settle out regularly to self-custody or your bank.
- For businesses: keep hot-wallet balances small, require multi-party approval for large transfers, and alert on unusual outflows across every chain.
Timeline 2
Follow new drains and updates in your feed reader or Telegram RSS bot.