- Triple-A confirmed a treasury wallet breach, with losses of about $11.8 million.
- The company said customer funds were unaffected because client assets are held separately in trust accounts.
- Attackers minted 5.22M unbacked WEMIX$ tokens and stole about $724K before the protocol halted.
Stablecoin payments firm Triple-A has confirmed that attackers gained unauthorized access to its treasury wallets. On-chain investigators estimate the company lost about $11.8 million in company-owned digital assets.
The disclosure came as the WEMIX ecosystem suffered a separate smart contract exploit. That attack resulted in roughly $724,000 in losses.
Triple-A Says Customer Funds Are Safe
In its statement, Triple-A said it detected unauthorized access to certain wallets holding the company’s digital assets on July 25.
The company emphasized that customer funds were not affected because it does not provide crypto custody services. Instead, client assets are held separately in trust accounts with safeguarding institutions that were not exposed to the breach.
As a precaution, Triple-A placed some services into maintenance mode for about three hours while securing its infrastructure. The company said all services have since resumed, with transactions and settlements operating normally.
Triple-A did not disclose the amount stolen. However, on-chain investigator Specter estimated the losses at about $11.8 million across Ethereum, TRON, Polygon, and Arbitrum wallets.
The company said only its treasury assets were affected. It added that the financial impact will be fully covered by its treasury reserves and that it remains well-capitalized and able to meet all liabilities.
Triple-A is working with cybersecurity experts, blockchain forensics specialists, and the Singapore Police Force to investigate the breach, trace the stolen assets, and support recovery efforts.
WEMIX Exploit Mints Unbacked Tokens
Less than 24 hours after the Triple-A incident, the WEMIX blockchain disclosed a separate security breach involving its WEMIX$ stablecoin contract.
According to the project, an attacker gained control of the contract and minted about 5.22 million unbacked WEMIX$ tokens. The attacker swapped part of the tokens and moved roughly $724,000 worth of assets off-chain before the protocol halted its bridges and decentralized exchanges.
Early reports estimated losses at around $6.25 million. However, WEMIX later said the amount successfully bridged out of the ecosystem was about $724,000.
The WEMIX team has also asked exchanges to freeze any related assets while it investigates the incident.
Crypto Security Losses Keep Rising
The two incidents add to the list of crypto security breaches in 2026. Industry estimates suggest that more than $1 billion has already been lost to hacks this year. This underscores the ongoing risks in treasury wallet management and smart contract vulnerabilities.
While Triple-A maintains that the breach was limited to its operational treasury wallets, WEMIX is continuing recovery efforts following its second major security incident in less than 18 months.
Related: Robinhood CEO Vlad Tenev’s X Account Suspected Hacked as VLAD Token Exploiter Nets $1.3M
Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.
