- Trending
- Comments
- Latest
Crypto casino Duelbits took its website offline on 24th September, 2026, after hackers drained an estimated $7 million from its hot wallets, founder Joe confirmed in a post on X.
“Until we have clarity, Duelbits stays offline. User funds are safe.” Joe, Duelbits founder, in a post on X.
The company’s official X account had earlier acknowledged a security incident affecting the website. It said the site had been taken offline while the company investigated the breach and worked to determine when service could safely resume.
The Duelbits hack was also tracked by blockchain security firms as suspicious transactions began moving funds from wallets associated with the casino. Scamsniffer and PeckShield reported approximately $4.9 million in outflows from Duelbits hot wallets across Ethereum, Bitcoin, BNB Chain and Tron.
The transactions involved several major crypto assets. According to the security-firm tracking cited in the original report, the stolen funds included approximately $2.23 million in ether, $680,000 in bitcoin, $1.62 million in USDT and $160,000 in BNB. Smaller amounts of TRX and SHIB were also involved.
The movement of assets across several networks added to the complexity of the Duelbits hack. Blockchain security researchers observed that some of the funds were rapidly exchanged for ether and DAI, making the movement of the assets an important part of the ongoing investigation.
Scamsniffer suggested that a private key compromise could have been responsible for the attack. However, the platform itself had not publicly confirmed the precise technical cause of the breach at the time of the report.
The scale of the incident also appeared to exceed the approximately $4.9 million in suspicious outflows initially tracked by security firms. Duelbits’ founder estimated the total loss at about $7 million, indicating that additional transactions or assets may have been included in the company’s assessment.
A separate post attributed to Jasper, identified as Duelbits’ CEO and affiliated with the company’s official account, reflected the immediate response to the incident.
“We got f—–. We’ll be back soon,” — Jasper, identified as Duelbits’ CEO, in a post on X.
The company has not provided a detailed public account of the attack beyond confirming the security incident and temporarily taking the website offline.
The Duelbits hack is not the platform’s first major security incident. In February 2024, Duelbits suffered another attack in which approximately $4.6 million worth of funds were drained from its hot wallet.
Security company Halborn reported at the time that the attacker had exploited a security vulnerability to remove tokens from the project’s hot wallet.
“The attacker exploited a security vulnerability to drain the tokens from the project’s hot wallet.” — Halborn, reporting on the February 2024 Duelbits incident.
The earlier breach provides additional security context for the latest attack, although the available information does not establish that the two incidents were caused by the same vulnerability or attacker.
The Duelbits hack comes amid continued security challenges across the wider cryptocurrency industry, where exchanges, decentralized finance protocols and other crypto businesses remain targets for attackers.
The Duelbits hack also occurred during a period of elevated crypto-security activity. TRM Labs reported 207 individual cryptocurrency hacks during the first half of 2026, the highest number recorded by the firm for any six-month period.
Those attacks resulted in approximately $972 million worth of stolen funds, according to TRM Labs. The firm said most of the incidents during the period involved exploits targeting smart contracts that underpin decentralized finance platforms.
The broader trend highlights the continuing security risks associated with holding digital assets in online wallets and operating cryptocurrency-based services. Hot wallets, which remain connected to blockchain networks to facilitate transactions, can provide operational convenience but can also become targets when attackers gain access to the credentials or infrastructure controlling them.
For Duelbits, the immediate priority following the Duelbits hack is determining how the attackers gained access, identifying the full amount taken and assessing whether any additional wallets were affected. The company has not announced when its website will return to service.
The Duelbits hack investigation therefore remains ongoing, with blockchain activity providing security researchers with a trail of transactions while the casino works to establish the full circumstances surrounding the breach. Until the investigation is completed, the company’s decision to remain offline leaves its users waiting for further information about service restoration and the status of the incident.
The Duelbits hack demonstrates how a security breach involving a crypto platform can quickly extend across multiple blockchain networks, requiring both the affected company and independent blockchain researchers to track asset movements as the investigation develops.
Copyright © 2025 - The Bit Gazette.
