Crypto gambling platform Duelbits has taken its website offline after attackers drained roughly $7 million from its hot wallets on Thursday — the same day as the far larger Bitget exchange breach, and by an apparently similar failure mode: suspected private key compromise.
"Confirming a ~$7M hack. Still investigating exactly what happened and how," co-founder Joe wrote on X, adding that user funds are safe and that the platform would stay offline until the investigation is finished and its hot wallets are refilled.
What Moved, Where
Blockchain security firm Scam Sniffer first flagged the outflows, reporting that Duelbits hot wallets on Ethereum, BNB Chain and Tron sent funds to newly created addresses — a pattern consistent with a private key compromise rather than a smart contract exploit. The firm later said the platform's Bitcoin hot wallet also lost 8.1 BTC, CoinDesk reported.
Etherscan data shows the labeled Duelbits Ethereum hot wallet sent 836 ETH, about 593,000 USDT, 97,000 USDC, 31,500 DAI and 12.4 billion SHIB to the attacker within minutes. The wallet now holds less than $25 in ether.
PeckShield separately reported about $4.3 million in suspicious outflows across Ethereum and BNB Chain — 836 ETH ($2.23 million), 1.146 million USDT, 209 BNB, 96,805 USDC, 12.398 billion SHIB and 31,515 DAI, The Crypto Basic reported. The gap between the firms' figures reflects different chain coverage and timing; Duelbits' own confirmation puts the total at roughly $7 million.
Most of the stolen assets have since been swapped to ether and consolidated into a single new address holding about 2,234 ETH, worth roughly $6 million. The funds had not moved onward as of CoinDesk's publication.
The Casino Pattern
A suspected private key compromise is also what targeted Stake, the largest crypto casino by volume, in 2023, when hackers made off with $40 million. Gambling platforms remain attractive targets because they run continuous hot-wallet flows for deposits and payouts across many chains — a broad attack surface with high turnover.
Before the incident, DappRadar ranked Duelbits 17th of 43 tracked crypto casinos by on-chain deposits, with about $5.7 million across its monitored wallets. The platform said in a statement that it took the site offline as a precaution while it investigates the "security incident."
The static $6 million ether pile gives investigators a fixed reference point — and gives the attacker a problem, since moving it through any regulated bridge, exchange or swap service now means touching infrastructure that has already been warned.
TrustGrade tracks platform security posture and incident history. Verified trust data: trustgrade.ai.