{
 "tag": "peckshield",
 "name": "Peckshield",
 "group": "Other",
 "incidents": [
  {
   "slug": "whale-wallet-25m-drain-aug-2026",
   "title": "Whale drained of $25.6M in aWBTC, DAI, WBTC and ETH; same wallet lost $24M to phishing in 2023",
   "url": "https://drains.watch/i/whale-wallet-25m-drain-aug-2026",
   "json": "https://drains.watch/i/whale-wallet-25m-drain-aug-2026.json",
   "status": "live",
   "severity": "critical",
   "threatStatus": "active",
   "verification": "verified",
   "chains": [
    "ethereum"
   ],
   "method": null,
   "product": "Unidentified Ethereum whale wallet",
   "tags": [
    "ethereum",
    "whale",
    "phishing",
    "aave",
    "awbtc",
    "peckshield",
    "repeat-victim"
   ],
   "amountUsd": 25600000,
   "victims": 1,
   "startedAt": "2026-08-12",
   "closedAt": null,
   "updatedAt": "2026-08-13T12:00:00Z",
   "summary": "On 12 August 2026 an unidentified whale lost about $25.6M, including about $6.3M in aWBTC, $5.1M in DAI, $4.7M in WBTC and $2.6M in ETH, according to PeckShield. Analyst Specter called it a phishing attack and PeckShield called it a hack; the exact method has not been published. The attacker swapped the funds into DAI and ETH across four addresses. The same wallet lost about $24.2M through malicious token approvals in September 2023."
  },
  {
   "slug": "triple-a-hot-wallets-drained-jul-2026",
   "title": "Crypto payments firm Triple-A loses $9.7M+ from hot wallets on Ethereum, Solana, TRON and TON",
   "url": "https://drains.watch/i/triple-a-hot-wallets-drained-jul-2026",
   "json": "https://drains.watch/i/triple-a-hot-wallets-drained-jul-2026.json",
   "status": "live",
   "severity": "critical",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "chains": [
    "solana",
    "ethereum",
    "tron"
   ],
   "method": null,
   "product": "Triple-A payment processor hot wallets",
   "tags": [
    "solana",
    "ethereum",
    "tron",
    "payments",
    "hot-wallet",
    "treasury",
    "triple-a",
    "multi-chain",
    "peckshield"
   ],
   "amountUsd": 9700000,
   "victims": null,
   "startedAt": "2026-07-24",
   "closedAt": null,
   "updatedAt": "2026-07-25T12:00:00Z",
   "summary": "On Jul 24, 2026, on-chain analyst Specter flagged suspicious outflows from hot wallets of the crypto payment processor Triple-A, and PeckShield later estimated losses above $9.7 million. crypto.news lists Ethereum, Solana, TRON and TON as affected, with some reports adding Polygon and Arbitrum. The proceeds were gathered in an Ethereum address holding about 5,227 ETH. The cause had not been disclosed, and no evidence tied the breach to Triple-A's custody provider Fireblocks. Merchants and customers should rely only on Triple-A's official channels for updates."
  }
 ],
 "changes": [
  {
   "incident": "whale-wallet-25m-drain-aug-2026",
   "incidentTitle": "Whale drained of $25.6M in aWBTC, DAI, WBTC and ETH; same wallet lost $24M to phishing in 2023",
   "severity": "critical",
   "status": "live",
   "threatStatus": "active",
   "date": "2026-08-13",
   "title": "PeckShield reported the theft and said the stolen aWBTC, DAI, WBTC and ETH were swapped into DAI and ETH and split across four addresses.",
   "sourceUrl": "https://u.today/crypto-hack-drains-256-million-from-unknown-victims",
   "url": "https://drains.watch/i/whale-wallet-25m-drain-aug-2026"
  },
  {
   "incident": "whale-wallet-25m-drain-aug-2026",
   "incidentTitle": "Whale drained of $25.6M in aWBTC, DAI, WBTC and ETH; same wallet lost $24M to phishing in 2023",
   "severity": "critical",
   "status": "live",
   "threatStatus": "active",
   "date": "2026-08-13",
   "title": "Specter described the theft as phishing; the same wallet had lost about $24.2M to malicious token approvals in September 2023.",
   "sourceUrl": "https://www.tronweekly.com/phishing-attack-drains-crypto-whale-wallet/",
   "url": "https://drains.watch/i/whale-wallet-25m-drain-aug-2026"
  },
  {
   "incident": "whale-wallet-25m-drain-aug-2026",
   "incidentTitle": "Whale drained of $25.6M in aWBTC, DAI, WBTC and ETH; same wallet lost $24M to phishing in 2023",
   "severity": "critical",
   "status": "live",
   "threatStatus": "active",
   "date": "2026-08-12",
   "title": "The whale's wallet was drained of about $25.6M in assets.",
   "sourceUrl": "https://www.tronweekly.com/phishing-attack-drains-crypto-whale-wallet/",
   "url": "https://drains.watch/i/whale-wallet-25m-drain-aug-2026"
  },
  {
   "incident": "triple-a-hot-wallets-drained-jul-2026",
   "incidentTitle": "Crypto payments firm Triple-A loses $9.7M+ from hot wallets on Ethereum, Solana, TRON and TON",
   "severity": "critical",
   "status": "live",
   "threatStatus": "partly-contained",
   "date": "2026-07-25",
   "title": "PeckShield amplified the alert as estimates rose above $9.7M; Triple-A had not yet confirmed the breach.",
   "sourceUrl": "https://crypto.news/triple-a-hot-wallets-lose-9-7m-in-suspected-exploit/",
   "url": "https://drains.watch/i/triple-a-hot-wallets-drained-jul-2026"
  },
  {
   "incident": "triple-a-hot-wallets-drained-jul-2026",
   "incidentTitle": "Crypto payments firm Triple-A loses $9.7M+ from hot wallets on Ethereum, Solana, TRON and TON",
   "severity": "critical",
   "status": "live",
   "threatStatus": "partly-contained",
   "date": "2026-07-24",
   "title": "Analyst Specter flagged suspicious transfers from Triple-A hot wallets, first estimated at over $9.3M.",
   "sourceUrl": "https://crypto.news/triple-a-hot-wallets-lose-9-7m-in-suspected-exploit/",
   "url": "https://drains.watch/i/triple-a-hot-wallets-drained-jul-2026"
  }
 ]
}