Triple-a hot wallet exploit reaches $11.8 million as deposits keep draining
Security & Exploits ·
A whale account tied to OnChainOracle withdrew $8 million from the platform shortly before the exploit began, fueling scrutiny over the timing.
Triple-a's hot wallet losses have climbed to $11.8 million, with fresh user deposits continuing to be drained even as the incident unfolds, according to a writeup tracking the exploit. The figure has not been confirmed as final, and the mechanism by which new deposits are being siphoned has not been detailed publicly. What has drawn particular attention is the $8 million withdrawal by an OnChainOracle-linked whale account that preceded the incident, a sequence one commentator described as the number that "don't let me sleep easy."
No explanation has been offered for how the whale's exit relates to the subsequent drain, and it remains unclear whether the withdrawal was coincidental or connected to knowledge of the platform's vulnerability. Triple-a has not issued a public statement confirming the total loss figure, the root cause of the hot wallet compromise, or whether user funds beyond the $11.8 million are at risk.
The exploit surfaces alongside unrelated but concurrent Ethereum infrastructure activity: Lido has begun migrating a large share of staked ETH onto its Curated Module v2, consolidating validators onto larger, post-Pectra infrastructure. Coverage of that migration, pegged at $16.5 billion by CoinDesk and at $16 billion by The Block, describes the effort as reducing Ethereum's total validator count by roughly one-third and introducing bonded operator requirements under the new architecture, as also detailed by WuBlockchain. The two developments are not linked beyond both touching Ethereum-adjacent infrastructure on the same day.
Market prices showed limited reaction to the Triple-a exploit at the time of reporting, with BTC down 0.33% near $65K and ETH up 0.83% near $1.9K.
What remains unresolved is whether Triple-a will halt deposits entirely, disclose the technical cause of the hot wallet breach, or clarify the relationship, if any, between the OnChainOracle whale withdrawal and the exploit itself. The final scope of losses, and whether any funds can be recovered or frozen, has not yet been reported.