A crypto casino just lost $7 million to a hot-wallet hack. The pattern is familiar
Crypto casino Duelbits went offline after attackers drained about $7 million from hot wallets on four blockchains, in a suspected private-key compromise. Its co-founder says user funds are safe. That reassurance, as ever, is the platform’s own.
Published · 2 min read
Crypto gambling platform Duelbits took its site offline after attackers drained roughly $7 million from its hot wallets on Thursday, across Ethereum, BNB Chain, Tron and Bitcoin, in what security researchers describe as a suspected private-key compromise, according to CoinDesk.
A co-founder confirmed the breach and said customer funds are safe. As with any exchange or platform hack, that reassurance is, for now, the company’s own account.
What happened
Blockchain security firm Scam Sniffer first flagged unusual outflows before Duelbits confirmed the incident. The Ethereum hot wallet alone sent 836 ETH, along with stablecoins and 12.4 billion SHIB, to the attacker within minutes, and the bitcoin hot wallet lost 8.1 BTC. Most of the stolen assets were swapped into ether and parked in a single address holding about 2,234 ETH, worth roughly $6 million, which had not moved as of reporting.
“Confirming a ~$7M hack. Still investigating exactly what happened and how.”
Why this keeps happening
A private-key compromise means the attacker gained control of the keys that authorize transactions from the hot, online wallets, rather than exploiting a clever smart-contract bug. It is the same method that hit Stake, the largest crypto casino by volume, for about $40 million in 2023. Hot wallets are convenient and, by design, exposed, which is why they remain the soft target on almost every platform.
For users, a breach like this is the clearest argument for the boring rules: keep only what you are actively using on any online platform, and hold the rest yourself, as we cover in self-custody explained.
Our take
Treat the amount and the funds are safe assurance as claims to watch, not settled facts; the on-chain trail and any user impact will tell the fuller story in the coming days. The durable lesson is unglamorous and reliable: hot-wallet risk is real and recurring, and money you do not leave on a platform cannot be drained from it. This is news, not investment advice.