Crypto Payment Service Triple-A Hacked: $9.7 Million Siphoned Off

Crypto payment service Triple-A appears to be the victim of an active hack, with attackers already stealing over $9.7 million. The funds were held in hot wallets on multiple blockchains, and the attack appears to still be ongoing at the time of writing. New deposits are being drained immediately.

On-chain analyst Specter flagged suspicious outflows from Triple-A’s hot wallets on TRON, Ethereum, Polygon and Arbitrum. The stolen assets converge on a single address that now holds 5,227 ETH, worth over $9.7 million. The Ethereum price currently stands at $1.852,45, down 1.9% over the past 24 hours.

Deposits still active while funds are drained

One of the most concerning aspects of this incident is that Triple-A is still allowing deposits, while newly deposited funds are immediately taken by the attackers. This means that users who send money to the service now will lose those funds instantly. There is no warning or block from the platform itself.

Triple-A has not yet issued an official response to the incident at the time of writing. The company does not publicly acknowledge the exploit, raising further questions about its transparency towards users. The platform processes crypto payments for businesses worldwide and therefore has access to substantial funds from both merchants and end users.

Multiple networks hit simultaneously

The attack is notable for its breadth. The hackers strike multiple networks at once, including TRON, Ethereum, Polygon and Arbitrum. This points to either a leaked private key that grants access to wallets on all those chains, or a vulnerability in Triple-A’s own infrastructure that exposes multiple networks simultaneously.

The stolen ETH is consolidated into a single address, a tactic attackers often use to quickly pool assets before distributing or laundering them through mixers and decentralised exchanges. Exactly how the exploit works has not yet been confirmed by security researchers or Triple-A itself. Users who have funds with Triple-A or are planning to deposit would be wise to avoid doing so for now until more clarity emerges.