Photo: Connor Scott McManus / Pexels
Duelbits goes offline after $7M hot wallet hack
The crypto casino suffered a suspected private key compromise, with stolen assets rapidly laundered through cross-chain bridges and swaps.
Duelbits, a crypto casino and sports betting platform, has suspended operations after hackers drained an estimated $7 million from its hot wallets across multiple blockchain networks. The September 24 breach marks the second major security incident for the Curacao-licensed platform in roughly two years.
Initial reports pegged the losses at approximately $4.2 million across Ethereum, BNB Chain, and Tron. But once investigators factored in additional outflows from Bitcoin and Solana wallets, the damage climbed toward the $7 million figure.
What the attackers took
The haul was spread across a buffet of digital assets: 836 ETH, 1.62 million USDT, 97K USDC, 209 BNB, and 192K TRX, along with what appear to be smaller flows on Bitcoin and Solana. The suspected root cause was a private key leak tied to the platform’s hot wallets. Funds were sent to freshly created wallet addresses, and most of the stolen tokens were then quickly converted to ETH and routed through cross-chain bridges and swap protocols.
A familiar script for Duelbits
This is not Duelbits’ first time on the wrong end of a wallet drain. The platform suffered a similar breach back in February 2024, losing approximately $4.6 million in that incident.
The news moving money, markets, and the world—before your day starts.
Daily. Free. Join 34,000+ readers across crypto, finance, and policy.
A co-founder of Duelbits has stated that user funds remain safe, with the platform planning to replenish its hot wallets and relaunch. Duelbits has maintained a distinct separation between operational hot wallets and user reserves held in cold storage. The platform is licensed by the Curacao Gaming Authority.
The bigger picture for crypto platforms
Hot wallet compromises have become one of the most common attack vectors in the crypto industry. The core tradeoff is straightforward: platforms need liquid, internet-connected wallets to process withdrawals quickly, but those same wallets present a larger attack surface than cold storage solutions that keep private keys offline.
Duelbits’ plan to replenish its hot wallets and resume operations will be a test case worth watching. After two breaches totaling roughly $11.6 million combined, the platform will need to demonstrate materially improved key management practices to retain its existing user base.