Crypto casino Duelbits has taken its platform offline following a security breach that saw attackers drain roughly $7 million from the company's hot wallets, with the incident spanning four separate blockchains.
What Happened
The gambling platform confirmed the breach after malicious actors gained access to its hot wallets, the internet-connected wallets used to process fast transactions and player withdrawals. According to on-chain analysis, the attackers moved funds across four different blockchains before consolidating the majority of the proceeds.
Approximately $6 million of the stolen assets has since been funneled into a single Ethereum address, a common tactic used by attackers to aggregate loot before attempting to launder or cash out the funds.
Hot wallets are the beating heart of any crypto casino — and also its most exposed vulnerability.
In response, Duelbits took its site offline, halting operations while it investigates the scope of the intrusion and works to secure remaining assets.
The Hot Wallet Risk
The incident underscores an ongoing challenge for online crypto gambling operators, which must keep significant sums in hot wallets to enable instant deposits and payouts. That convenience comes with heightened exposure, as internet-connected wallets remain a favored target for attackers.
Security experts have long recommended that platforms minimize the balances held in hot wallets and rely on cold storage for the bulk of reserves. Breaches of this kind frequently stem from compromised private keys or vulnerabilities in the systems that manage them.
Key takeaways from the Duelbits incident:
- Roughly $7 million drained from hot wallets
- Funds spread across four blockchains before consolidation
- About $6 million now held in one Ethereum address
- The platform remains offline pending investigation
Duelbits has not yet detailed how it intends to compensate affected users or when its services might resume. The company's handling of the aftermath will likely shape user trust as investigators trace the movement of the stolen assets.