Key Highlights
- Crypto gambling platform Duelbits suffered a $7 million hot wallet exploit on Thursday, prompting the site to go offline while co-founder Joe confirmed “user funds are safe.”
- Blockchain security firm Scam Sniffer identified a suspected private key compromise affecting wallets on Ethereum, BNB Chain, Tron, and Bitcoin, with 8.1 BTC also stolen.
- The attack mirrors the 2023 Stake.com breach, where hackers stole $40 million using the same private key compromise method.
Duelbits Takes Platform Offline After $7 Million Hot Wallet Drain
Crypto gambling platform Duelbits went offline on Thursday after attackers drained approximately $7 million from its hot wallets across multiple blockchains. The incident was first flagged by blockchain security firm Scam Sniffer, which reported that Duelbits hot wallets on Ethereum, BNB Chain, and Tron had sent funds to newly created addresses in what appeared to be a private key compromise. The firm later confirmed the company’s Bitcoin hot wallet also lost 8.1 BTC in the attack.
Co-Founder Confirms Breach, Assures User Funds Secure
Duelbits co-founder Joe addressed the incident on X, stating: “Confirming a ~$7M hack. Still investigating exactly what happened and how,” adding that “user funds are safe.” He indicated the platform would remain offline until the investigation concludes and its hot wallets are refilled. The direct acknowledgment from leadership came as on-chain data continued to reveal the full scope of the asset movements.
On-Chain Analysis Reveals Multi-Chain Asset Losses
Etherscan data shows the Ethereum wallet labeled as a Duelbits hot wallet transferred 836 ETH, approximately 593,000 USDT, 97,000 USDC, 31,500 DAI, and 12.4 billion SHIB to the attacker within minutes. The compromised Ethereum wallet now holds less than $25 in ether. Scam Sniffer’s analysis indicates the simultaneous compromise across Ethereum, BNB Chain, Tron, and Bitcoin networks strongly points to a private key breach rather than a smart contract vulnerability.
Attack Method Mirrors 2023 Stake.com Breach
The suspected private key compromise mirrors the methodology used in the 2023 attack on Stake.com, the largest crypto casino by volume, where hackers made off with $40 million. That incident, also attributed to a private key compromise, raised significant concerns about key management practices across the crypto gambling sector. The recurrence of this attack vector suggests persistent operational security challenges for platforms managing large hot wallet balances.
Why This Matters
The Duelbits hack underscores the ongoing vulnerability of centralized hot wallet infrastructure in the crypto gambling industry. Despite high-profile incidents like the Stake.com breach, platforms continue to maintain substantial assets in internet-connected wallets secured by single points of failure. The multi-chain nature of this exploit—hitting Ethereum, BNB Chain, Tron, and Bitcoin simultaneously—demonstrates how a single private key compromise can cascade across an operator’s entire treasury. For users, the incident reinforces the importance of platform solvency transparency and the risks inherent in custodial gambling platforms. Regulators and industry watchdogs will likely scrutinize whether Duelbits’ claim that “user funds are safe” holds up during the investigation and whether the platform maintains sufficient cold storage reserves to cover the hot wallet losses without impacting customer balances.
Frequently Asked Questions
How much was stolen in the Duelbits hack?
Approximately $7 million was drained from Duelbits hot wallets across Ethereum, BNB Chain, and Tron, plus an additional 8.1 BTC from the platform’s Bitcoin hot wallet.
What caused the Duelbits security breach?
Blockchain security firm Scam Sniffer identified a suspected private key compromise as the attack vector, noting that wallets across multiple chains sent funds to newly created addresses simultaneously.
Is Duelbits currently operational?
No, Duelbits has taken its platform offline. Co-founder Joe stated the site will remain offline until the investigation is finished and hot wallets are refilled.