Duelbits Takes Site Offline After $7 Million Hack
After the attack on hot wallets across Ethereum, BNB Chain, Tron, and Bitcoin, Duelbits is investigating a suspected private key compromise. The platform is keeping the site offline until the wallets are topped up.
Key Takeaways
- Duelbits took its site offline after attackers drained about $7 million from hot wallets on Thursday.
- Scam Sniffer spotted suspicious transactions on Ethereum, BNB Chain, Tron, and Duelbits' Bitcoin hot wallet lost 8.1 BTC.
- Duelbits is investigating the security incident and says user funds are safe until the hot wallets are topped up.
Crypto gambling platform Duelbits has taken its site offline after attackers drained about $7 million (€6.2 million) from hot wallets on Thursday. The company says user funds are safe, but it is keeping the site offline while the investigation continues and the hot wallets have not yet been topped up.
Attack Across Multiple Chains
According to blockchain security firm Scam Sniffer, the first signs of the attack came from hot wallets on Ethereum, BNB Chain, and Tron. Those wallets sent funds to newly created addresses, which points to a suspected private key compromise. Later, Scam Sniffer reported that Duelbits' Bitcoin hot wallet also lost 8.1 BTC.
Etherscan shows that an Ethereum wallet labeled as Duelbits sent 836 ETH, about 593,000 USDT, 97,000 USDC, 31,500 DAI, and 12.4 billion SHIB within minutes. After that, less than $25 (€22) worth of ether was left in that wallet.
Funds Consolidated in Ether
Most of the stolen assets were then converted to ether and consolidated into one new address. At the time of publication, it held about 2,234 ETH, worth around $6 million (€5.3 million). The funds had not been moved any further at that point.
Duelbits said in a statement that it is investigating a security incident and took the site offline as a precaution. Co-founder Joe wrote on X that the company is still figuring out exactly what happened and how, and that the hot wallets will only go back online once the investigation is finished.
Why This Matters
The attack fits a broader pattern in which private key compromises remain one of the biggest risks for crypto companies. That matters for European crypto readers because it shows that not only smart contracts, but also wallet management and key storage can be weak spots. A similar attack hit crypto casino Stake in 2023, when $40 million (€35.2 million) was stolen. Crypto Hacks in 2026 Shift Toward Keys and Governance also shows that stolen keys and operational weaknesses are increasingly what make the difference.
