hack or exploit

Crypto casino Duelbits goes offline after $7 million hot wallet hack

0Importance
closedStatus
4News media
4Pieces
Published
Updated
Since then
3 new reports
Also mentions
ETHBNBBTC +2

Duelbits took its platform offline after a roughly $7 million hot-wallet hack and said user funds are safe. The casino then stayed offline longer than first planned while it investigated the breach and worked to refill its wallets. Stolen assets were moved across several blockchains, and some of the funds were traced to a single Ethereum address.

Key claims & sources

✓
Duelbits confirmed a roughly $7 million hack and took its site offline after the breach.
✓
Scam Sniffer flagged outflows from Duelbits hot wallets on Ethereum, BNB Chain, Tron, and Bitcoin.
✓
The platform stayed offline while it investigated the breach and planned to replenish its hot wallet before resuming operations.
✓
The stolen assets were moved across four blockchains and converted largely into Ether.
✓
At 2:28 p.m. ET on Friday, co-founder Joe said the casino needed more downtime to secure the platform and refill its hot and cold wallets.
✓
Joe said customers would be able to withdraw immediately if they wanted to, and that user funds were safe.

What it means

Players and customers who use Duelbits were affected because the platform went offline and stayed offline on Friday, so withdrawals were still waiting to resume. The co-founder said at 2:28 p.m. ET that the team needed more downtime, and that user funds were safe while the casino remained unavailable.

In practice, the platform could not operate normally in the period after the hack, and it said it would refill its hot wallet before resuming. The update from Friday said the team was also working to secure the platform and refill both hot and cold wallets, which shows those functions were still being handled during the outage. (per tokenpost.com)

What remains open is the final status of the investigation and the full path of the stolen assets. The available coverage says the breach was under investigation, that funds moved across four blockchains, and that about $6 million sat in a single Ethereum address, but it does not say whether any recovery steps had been completed.

Market reaction i

Total crypto marketall crypto assets combined no single asset in the event: read against the whole market
first headline
— 2 h before
+0.2% 4 h after
$2.9Tmarket cap at publication
7data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 24 15:48
CoinDesk scoop
Breaks the event: $7M and $6M
+11 h 42 m
Sep 25 03:30
AMBCrypto echo
No new facts: converted, largely, drains
+1 d 4 h
Sep 25 19:50
+1 d 4 h
Sep 25 20:26
The Defiant echo
No new facts: withdrawals, sportsbook, reported; with quotes

Thefts of a similar size

WhenWhat happenedFigure
10 months ago Saga · Infinite mint incident $7M
1.2 years ago ODIN.FUN · Price manipulation incident $7M
2.0 years ago PolterFinance · FlashLoan attack incident $7M
2.8 years ago GMEE · Contract vulnerability incident $7M
3.2 years ago ExactlyProtocol · insufficient validation incident $7M

4282 incidents stored · 431 were as large as this one or larger ($7M)