Duelbits crypto casino loses about US$7 million from hot wallets; reopened, cause not published
Crypto casino Duelbits lost about US$7M from hot wallets on 24 Sep. It reopened on 27 Sep and says user funds are safe. No cause or recovery has been published. Users: keep only what you're willing to risk on the platform.
If you hold a balance at Duelbits, consider withdrawing what you don't need to keep there, and use a unique password with two-step sign-in. Nothing needs updating on your devices.
What’s happening
On 24 September 2026, about US$7 million left the hot wallets of Duelbits, a crypto gambling site, across Ethereum, BNB Chain and Tron. DeFiLlama's listing also names Bitcoin, which the sources I read do not confirm. Duelbits took the site offline and said customer funds were safe. Scam Sniffer called it a suspected private key compromise. The thief swapped most of the haul into ETH and DAI and consolidated it; a wallet holding about 2,333 ETH had sent nothing on when last reported. Duelbits relaunched on 27 September with deposits and withdrawals working and said it held about US$8 million for payouts. As of early November, no technical root cause has been published, no recovery has been reported, and no law enforcement action is public. The site was also hacked in February 2024, when about US$4.6 million was taken, according to CertiK.
- What
- Breach
- Affects
- Duelbits crypto casino (hot wallets)
- Fixed in
- Nothing to patch
- Since
- 24 Sept 2026
Timeline
- UpdateNothing to patch
A search found no technical post-mortem from Duelbits, no recovery of the stolen funds, and no public statement from law enforcement or regulators. Cause remains unconfirmed.
- All clearNothing to patch
Duelbits relaunched with deposits and withdrawals live, saying it held about US$8 million across hot and cold wallets for payouts. It had not published a cause or report.
- UpdateNothing to patch
Duelbits said it was rebuilding its deposit and withdrawal servers and needed more downtime to secure systems and refill its wallets. Stolen funds were swapped into ETH and DAI; a wallet holding about 2,333.6 ETH had sent nothing onward.
- Made publicNothing to patch
Scam Sniffer flagged about US$4.2 million leaving Duelbits hot wallets for newly created addresses. Duelbits said it was investigating a security incident and took the site offline; co-founder Joe later put the loss at about US$7 million and said user funds were safe.
Sources
- Crypto casino Duelbits loses $7 million in a hack but says user funds are safeUnchained · 25 Sept 2026
- Crypto casino Duelbits resumes operations after $7M hackForklog · 27 Sept 2026