Crypto casino Duelbits goes offline after $7 million hot wallet hack
- Duelbits confirmed a roughly $7 million hack and took its site offline, saying user funds are safe.
- Scam Sniffer flagged outflows from Duelbits hot wallets on Ethereum, BNB Chain, Tron and Bitcoin, pointing to a suspected private key compromise.
- Most of the stolen assets were swapped to ether and consolidated into one address holding about 2,234 ETH, worth roughly $6 million, which has not moved.
Crypto gambling platform Duelbits has taken its site offline after attackers drained roughly $7 million from its hot wallets on Thursday.
"Confirming a ~$7M hack. Still investigating exactly what happened and how," co-founder Joe wrote on X, adding that "user funds are safe." He said the platform would stay offline until the investigation is finished and its hot wallets are refilled.
Blockchain security firm Scam Sniffer first flagged the incident, reporting that Duelbits hot wallets on Ethereum, BNB Chain and Tron sent funds to newly created addresses in a suspected private key compromise. It later said the company's bitcoin hot wallet also lost 8.1 BTC.
A private key compromise is also the method that targeted Stake, the largest crypto casino by volume, in 2023. Hackers at the time made off with $40 million.
Etherscan data shows the Ethereum wallet, labeled as a Duelbits hot wallet, sent 836 ETH, about 593,000 USDT, 97,000 USDC, 31,500 DAI and 12.4 billion SHIB to the attacker within minutes. The wallet now holds less than $25 in ether.