Attackers drained roughly $7 million from Duelbits hot wallets across Ethereum, BNB Chain, Tron and Bitcoin on Thursday, prompting the crypto casino to take its site offline. Co-founder Joe said the platform was still investigating and that user funds were safe. The site will remain offline until the investigation is complete and its hot wallets are refilled.
Why it matters
Scam Sniffer identified outflows from newly created addresses and later reported that Duelbits' Bitcoin hot wallet lost 8.1 BTC, pointing to a suspected private-key compromise. The incident follows a similar attack on crypto casino Stake in 2023, when hackers stole $40 million.
On Ethereum, the affected wallet sent 836 ETH, about 593,000 USDT, 97,000 USDC, 31,500 DAI and 12.4 billion SHIB to the attacker within minutes. The wallet now holds less than $25 in ether.
Market impact
Most of the stolen assets were swapped into ether and consolidated into one address holding about 2,234 ETH, worth roughly $6 million. The funds had not moved onward as of publication, leaving the address as the key on-chain marker for any further activity.
DappRadar previously ranked Duelbits 17th among 43 tracked crypto casinos by on-chain deposits, with about $5.7 million across monitored wallets. It was unclear whether that figure reflected balances before or after the outflows. The incident puts hot-wallet controls, private-key security and user-fund assurances back at the center of crypto casino compliance concerns.
Frequently asked questions
-
How much did attackers steal from Duelbits?
Attackers drained roughly $7 million from Duelbits hot wallets across four blockchains. About $6 million of the stolen assets was later consolidated into ether.
-
Which blockchains were affected in the Duelbits hack?
The outflows involved Ethereum, BNB Chain, Tron and Bitcoin. Scam Sniffer also reported that Duelbits lost 8.1 BTC from its Bitcoin hot wallet.
-
What happened to the stolen Duelbits funds?
Most of the assets were swapped to ether and moved into one address holding about 2,234 ETH, worth roughly $6 million. The funds had not moved onward as of publication.
-
Why do investigators suspect a private-key compromise?
Scam Sniffer observed funds leaving Duelbits hot wallets for newly created addresses across multiple chains. The pattern pointed to a suspected private-key compromise.
-
What did Duelbits say about its users and website?
Duelbits said user funds were safe and took its site offline as a precaution. The platform said it would stay offline while the investigation continued and its hot wallets were refilled.
CoinDesk