Payment firm Triple-A’s hot wallets have lost more than .7 million spanning multiple blockchains. 

On-chain analyst Specter flagged the outflows on X (formerly Twitter) earlier today. This comes amid a streak of exploits hitting crypto protocols this month.

Analyst Flags .7 Million Triple-A Wallet Drain 

The drain spanned across TRON (TRX), Ethereum (ETH), Polygon (POL), and Arbitrum (ARB). Attackers swapped the assets and bridged them to Ethereum.

Hot wallets are internet-connected wallets that payment processors rely on to move funds quickly, but their constant online exposure also makes them a frequent target. By converting the stolen tokens and routing them through cross-chain bridges into a single Ethereum address, the perpetrators sought to consolidate the assets and make them harder to trace or freeze.

The funds now sit in one wallet, 0x01F83B5d4fb30E8AA3daC1681B4048D9135253b1. That address holds roughly 5,227 ETH, worth about .7 million.

“It looks like the team are not aware as deposit are not disabled and every new deposit is being drained,” Specter posted earlier today.

The warning points to a particularly damaging scenario: if deposit functionality stays active while the wallets are compromised, each incoming payment could flow straight to the attacker rather than the intended recipient, compounding the losses with every new transaction.

Follow us on X to get the latest news as it happens

Triple-A has not addressed the wallet outflows as of press time. BeInCrypto has reached out for comment.

Meanwhile, the drain adds to a difficult stretch for crypto security. On-chain trackers have logged a string of thefts across platforms in recent days. Lookonchain counted three separate attacks on July 23 worth .55 million.

Those hits included AFX Trade at .15 million, the Verus Ethereum bridge at .55 million, and B2 Network at .86 million. This marked Verus’ second exploit since May. Attackers drained roughly .58 million in digital assets on May 18.

The pattern underscores how cross-chain infrastructure and always-on wallets remain among the most exploited components in the industry. For payment providers that handle customer funds, incidents like this raise pressing questions about key management, deposit monitoring, and the speed of incident response. Until Triple-A issues an official statement, the full scope of the breach and the number of affected users remain unclear.

Subscribe to our YouTube channel to watch leaders and journalists provide expert insights

Source: BeInCrypto