"Sign here." That became the most expensive lesson in Triple-A's historyBetween July 24–25, an attacker drained more than $9M from wallets publicly linked to the project.
This wasn't a smart contract exploit. It wasn't a blockchain hack.
Every transaction was valid because it was signed with legitimate keys. The attacker didn't break the protocol — they compromised the wallet signing infrastructure.
The BitOK team reconstructed the entire flow of funds, tracing the assets from the first transfers across TRON, Ethereum, Polygon, and Arbitrum to the final wallet holding 5,228 ETH.
In our investigation, we break down:➤ how the attacker gained the ability to authorize legitimate transactions;
➤ why the stolen funds were split across TRON, Ethereum, Polygon, and Arbitrum;
➤ how more than $9M ended up consolidated into 5,228 ETH;
➤ and why compromising a transaction signing system can be even more dangerous than many traditional exploits.
Sometimes, stealing millions takes nothing more than a valid signature.Website | Telegram | BitOK bot
