Crypto Casino Duelbits Loses $7 Million in Hot Wallet Hack, Halts Operations

Crypto casino Duelbits has confirmed a significant cybersecurity breach that resulted in the loss of approximately $7 million from its hot wallets, prompting an immediate halt to all platform operations. The incident, disclosed by co-founder Joe on X, has led to a temporary shutdown as the company investigates the root cause and works to replenish its compromised wallets.

Initial reports from blockchain security firm Scam Sniffer indicated suspicious outflows totaling around $4.2 million across Ethereum, BNB Chain, and Tron. These transactions were directed to newly created addresses, suggesting a potential private-key compromise. The situation escalated as investigators identified an additional 8.1 BTC being transferred from the company's Bitcoin hot wallet, bringing the total estimated losses to approximately $7 million.

The affected wallets saw rapid transfers of various cryptocurrencies, including 836 ETH, 593,000 USDT, 97,000 USDC, 31,500 DAI, and 12.4 billion SHIB on the Ethereum network. Outflows were also noted on other chains, with 209 BNB and 192,000 TRX being moved. A significant portion of the stolen assets, valued at roughly $6 million, was consolidated into a single Ethereum address holding approximately 2,234 ETH.

While the transaction patterns strongly suggest unauthorized control over wallet-signing capabilities, Duelbits has not yet provided a definitive technical root-cause analysis. Security researchers widely suspect a compromise of private keys, which would allow attackers to authorize legitimate-looking transfers without exploiting smart contract vulnerabilities. Such a scenario underscores the critical importance of immediate credential rotation and wallet isolation.

In subsequent updates, Joe stated that Duelbits had identified the cause of the breach and promised a formal statement within 24 hours. He estimated that the platform could be back online within approximately 15 hours, noting that engineers were actively rebuilding the deposit and withdrawal servers to enhance security infrastructure and prevent recurrence.

The recovery plan outlined by Duelbits includes completing the ongoing investigation, replenishing the depleted hot wallets, restoring services, and launching an upgraded version, dubbed Duelbits 2.0. Keeping the platform offline is a crucial step to mitigate further exposure while security teams rotate keys, review access controls, reconcile balances, and validate transaction systems.

Despite assurances that customer funds are safe, the company has yet to detail the specific access vector, the wallet custody architecture involved, or whether external incident-response specialists and exchanges are assisting with asset recovery. Customers are advised to rely solely on official Duelbits channels for updates and to be wary of phishing attempts or impersonation scams that often emerge during high-profile crypto incidents.

The incident remains active until Duelbits releases a comprehensive statement detailing the confirmed root cause, the full extent of affected systems and stolen assets, and the specific safeguards implemented. Independent verification of resumed deposit and withdrawal functionalities will be paramount for rebuilding user trust following this substantial $7 million hack.