Treasury
3 incidents, 1 live. 90 days since the last new one.
3 drains in the last 12 months
3 drains in the last 12 months
3 drains in 2026
Live
-
Critical◐Partly contained
Crypto payments firm Triple-A loses $9.7M+ from hot wallets on Ethereum, Solana, TRON and TON
On Jul 24, 2026, on-chain analyst Specter flagged suspicious outflows from hot wallets of the crypto payment processor Triple-A, and PeckShield later estimated losses above $9.7 million. crypto.news lists Ethereum, Solana, TRON and TON as affected, with some reports adding Polygon and Arbitrum. The proceeds were gathered in an Ethereum address holding about 5,227 ETH. The cause had not been disclosed, and no evidence tied the breach to Triple-A's custody provider Fireblocks. Merchants and customers should rely only on Triple-A's official channels for updates.
Triple-A payment processor hot wallets·Solana, Ethereum, Tron·$9.7M stolen·Since Jul 24, 2026·
Past
January 2026 2
-
Critical✓Contained
Step Finance treasury wallets drained of about $40M; Solana platform later shuts down
On Jan 31, 2026, Step Finance reported a breach of some of its treasury wallets. CertiK saw 261,854 SOL (about $27 million) unstaked and transferred, and Step later put the total near $40 million. SlowMist's hack database classifies the cause as a private key leak. Step, SolanaFloor and Remora Markets announced a wind-down on Feb 23, 2026, with a STEP buyback based on a pre-hack snapshot and a USDC redemption process for Remora rToken holders. Holders should use only official Step channels for the buyback and redemption.
Step Finance treasury and fee wallets·Solana·$40M stolen·Since Jan 31, 2026·
-
Critical✓Contained
Meteora loses $1.5M USDC to fake OTC escrow in double-impersonation scam
On Jan 17, 2026, the Solana DEX Meteora sent $1.5 million in USDC to what it believed was a trusted escrow wallet for an OTC buyback of its MET token. Scammers had impersonated the seller to Meteora and Meteora to the seller, so the 'escrow' address was theirs. The funds were reportedly moved through KuCoin. No smart contract was exploited and no user funds were involved. Meteora disclosed the loss in its Q1 2026 token holder report. Teams doing OTC deals should confirm counterparties and escrow addresses over a separate, known channel.
Meteora treasury (OTC buyback of MET)·Solana·$1.5M stolen·Since Jan 17, 2026·
No drains match these filters.