Gamdom says it lost $3 million, but on-chain data shows $4.2 million gone across 8 blockchains

Crypto casino Gamdom says hackers took just over $3 million from its hot wallets. On-chain investigator vxdb says the real figure is $4.208 million across eight blockchains. The breach surfaced only after a server disk failure led the team to an unauthorized connection to an automation server, forcing the platform offline on October 14.

Blockchain estimates put the damage at $4.208 million

On-chain investigator vxdb estimated the total losses at $4.208 million, substantially exceeding Gamdom’s initial figure. The difference of approximately $1.2 million remains unexplained, with no publicly available post-mortem establishing why the two estimates diverge.

According to vxdb’s breakdown, approximately $2.2 million was taken across Ethereum, BNB Smart Chain (BSC), Polygon, Arbitrum and Optimism. The investigator also attributed approximately $668,000 in losses to Bitcoin, $965,000 to Solana and $375,000 to TRON.

The Gamdom exploit therefore appears to have extended across several blockchain networks rather than being confined to a single cryptocurrency. The reported distribution underscores the operational challenge of securing assets spread across different networks, each with its own transaction infrastructure and monitoring requirements.

Arkham Intelligence has also provided an entity-tracking page associated with the suspected attacker wallets. However, wallet attribution and transaction monitoring do not, by themselves, establish the full amount stolen or independently confirm every element of an incident.

Several factors could explain the difference between Gamdom’s estimate and vxdb’s calculation. Asset-price differences, the timing of valuations, the scope of transactions counted and any funds recovered could affect the totals. These remain possibilities, not confirmed explanations.

Until Gamdom releases a detailed accounting of the affected wallets, transaction history and recovery efforts, the precise financial impact will remain uncertain.

Duelbits breach highlights hot-wallet risks

The incident follows a reported September 2026 breach involving crypto gambling platform Duelbits, where estimates placed the losses between $5.9 million and $7 million. CertiK put the amount at approximately $6 million, according to the figures cited in the original report.

The similarities between the incidents have brought renewed attention to the security challenges facing cryptocurrency gambling businesses. These platforms need to process deposits, wagers and withdrawals efficiently, making readily accessible hot wallets an important part of their operations.

That convenience also creates risk. Hot wallets remain connected to systems that facilitate transactions, meaning compromised credentials, unauthorized server access or weaknesses in operational controls can expose funds to theft. A blockchain itself may continue functioning as designed even when the systems controlling access to wallets have been compromised.

The Gamdom exploit illustrates why wallet security cannot depend on blockchain technology alone. Companies must also protect server infrastructure, restrict access to sensitive credentials, monitor unusual transactions and maintain procedures for isolating compromised systems.

A stronger security model typically combines limited hot-wallet balances with more isolated storage for funds that do not need immediate access. Transaction limits, multi-party authorization, continuous monitoring and tested incident-response procedures can further reduce exposure, although no single safeguard eliminates every threat.

Record crypto theft figures raise the stakes

The breach comes amid a challenging year for cryptocurrency security. TRM Labs reported 207 crypto-hacking incidents during the first half of 2026, with approximately $972 million in losses. That was below the $2.3 billion recorded in stolen assets during 2025, despite the higher incident count.

The report also found that infrastructure and operational compromises accounted for approximately 76% of stolen funds while representing just 15% of incidents. The distinction matters because a relatively small number of attacks against critical systems can account for a disproportionate share of financial damage.

CertiK’s reported figures point to additional pressure later in the year. Its security dashboard put third-quarter losses at approximately $1.28 billion, a 56.2% increase, including $773.4 million in September. These figures use different reporting periods and methodologies, so they should not be treated as directly interchangeable.

There is currently no established evidence that the Gamdom exploit has triggered wider cryptocurrency market disruption. Coinbase Research reported positive trading indicators and $2.6 billion in US spot Bitcoin exchange-traded fund inflows for September 2026, but those figures predate the breach and cannot measure the market’s reaction to it.

For Gamdom, the immediate priority is restoring customer confidence through transparent communication and verifiable security improvements. A comprehensive post-mortem should clarify the attack’s entry point, the assets affected, the final loss calculation and the status of any recovery efforts.

The Gamdom exploit ultimately presents a test of operational accountability as much as cybersecurity. Until the platform reconciles its reported losses with independent blockchain estimates and explains how it plans to prevent a recurrence, questions about the incident will remain open.