Surge in Cyber Attacks: Triple-A, WEMIX, and Garden Finance Targeted in Major Security Breaches

How the Hacker Stole $11.8M and What’s Known About the Attack

Two Attacks Over the Weekend: WEMIX Loses $724,000, Garden Finance $450,000

A Week of Hacks: AFX Trade, Verus, and New Attacks

Surge in Cyber Attacks: Triple-A, WEMIX, and Garden Finance Targeted in Major Hacks

Singapore, July 2026 — The summer of 2026 has turned into a battleground for cybersecurity, with a notable spike in hacker and scammer activity. Recent attacks have left major players in the crypto and finance sectors reeling, including Singapore-based payment service Triple-A, South Korean project WEMIX, and cross-chain protocol Garden Finance.

Triple-A Suffers $11.8 Million Loss

Triple-A, which specializes in stablecoin settlements, confirmed unauthorized access to its treasury wallets, leading to a staggering loss of $11.8 million. Initial estimates had pegged the loss at $9.3 million, but as the investigation unfolded, the figure climbed due to additional withdrawals of Bitcoin (BTC) and TRON (TRX).

The company reassured clients that their funds remained secure, as they are held in trust accounts with third-party custodians, in compliance with regulatory requirements. The breach was limited to operational accounts, and Triple-A plans to cover the losses using its reserves.

The attack commenced on July 24, with the hacker withdrawing funds across multiple networks, including Ethereum (ETH), Polygon (POL), and Solana (SOL). By July 25, Triple-A had temporarily suspended services for three hours to isolate affected infrastructure, and all operations have since resumed.

WEMIX and Garden Finance Hit Hard

In a separate incident, WEMIX fell victim to an attack on July 26, losing approximately $724,000. The hacker exploited a contract tied to WEMIX’s stablecoin, minting unauthorized stablecoins and converting them into WEMIX and USDC before bridging to Ethereum and BNB Smart Chain. In response, the WEMIX team suspended all network bridges and requested exchanges to freeze affected assets.

Meanwhile, Garden Finance reported a loss of $450,000 due to an attack that drained funds from hash-time-locked contracts across multiple chains. The protocol clarified that its smart contracts were not compromised; instead, the hacker infiltrated an off-chain database and injected fake transaction data, leading to unauthorized fund transfers. Garden Finance has paused operations for an investigation.

A Week of Woes for the Crypto Sector

These incidents follow a week of significant hacks, including a $24.15 million loss for AFX Trade due to a validator compromise and a $7.54 million loss from the Verus-Ethereum bridge. The ongoing wave of cyberattacks underscores the systemic risks plaguing the cross-chain infrastructure, which has suffered over 10 major exploits in 2026 alone, totaling losses exceeding $350 million.

For Triple-A, this incident poses a serious reputational challenge, especially given its major payment institution license from the Monetary Authority of Singapore. As the crypto landscape continues to evolve, the need for robust cybersecurity measures has never been more critical.

As the investigation into these attacks unfolds, industry experts and stakeholders are left to ponder the implications for the future of digital finance and the security of assets in an increasingly perilous environment.