🔓 Triple-A's client funds survived its breach untouched. Its own treasury didn't. That outcome was decided months before the incident, not during it. Triple-A, a Singapore-based stablecoin and fiat payment gateway, identified unauthorized access to its own wallets on 25 July. Client funds were unaffected. Triple-A doesn't hold client assets in custody, and MAS's user-protection regime for digital payment token service providers, in force since October 2024, requires client assets to be segregated and reconciled daily. Regulation drew that boundary. Nobody draws one around a company's own operating treasury, so most companies never do. That's where this incident played out. Onchain researchers put the loss at roughly $11.8 million; Triple-A hasn't confirmed a figure. Outflows spanned at least six blockchains for about 31 hours, each chain with its own keys and pause button. Detection wasn't the failure, containment across six simultaneous chains was. Range is the platform for companies operating across stablecoins and fiat. We don't prevent key compromise, our lane is giving finance, compliance and risk teams one view across every wallet and chain, so containment runs in minutes, not a day and a half. Where's your boundary between company and client assets, and how long would containment take you? Read the full breakdown 👇