Duelbits Hit By Suspected Private Key Compromise As Losses Approach $6M
In Brief
Crypto casino Duelbits suffers a suspected private key compromise, with hackers draining up to $6M across five blockchains — its second major exploit since 2024.
Crypto casino and sportsbook Duelbits appears to have suffered a major security breach, with blockchain security firm ScamSniffer reporting roughly $4.2 million in outflows from the platform’s hot wallets on Ethereum, BNB Chain and Tron to newly created addresses — a pattern consistent with a private key compromise.
The stolen assets included 836 ETH, 1.62 million USDT, 97,000 USDC, 209 BNB and 192,000 TRX, the majority of which have since been converted into ETH, a common laundering tactic that consolidates heterogeneous tokens into a single, highly liquid asset.
The scope of the incident expanded as further monitoring came in. Duelbits’ Bitcoin hot wallet recorded an additional outflow of 8.1 BTC, valued at approximately $680,000, bringing the confirmed total to around $4.9 million.
CertiK initially estimated losses at $4.6 million before on-chain investigator Specter clarified that the figure was closer to $4.9 million, with further sums traced on Bitcoin and, subsequently, about $1 million on Solana linked to the same campaign — pushing the potential total toward $5.9–6 million.
The suspected theft addresses have been identified across Bitcoin, Tron, Ethereum and Solana, giving investigators a clear trail to track, though the swapping of funds to ETH suggests an attempt to complicate recovery and attribution.
Platform Response and a Troubling Precedent
In response to the incident, Duelbits confirmed it was investigating a security incident affecting the site and, as a precaution, took the platform offline while working to verify it was safe to restore service — a standard containment measure, though one that leaves users temporarily unable to access funds or place bets.
The exchange has yet to provide a full post-mortem explaining how the private keys were exposed, a detail the crypto community will be watching closely given the scale of the loss.
Critically, this is not the first time Duelbits has faced such an attack. In 2024, CertiK reported that hackers exploited the platform and extracted $4.6 million through a similar private key compromise, withdrawing assets on Ethereum and BNB Chain and converting them to ETH — nearly identical behavior to the current incident.
Cyvers Alert attributed that earlier breach to a loss of wallet access. For a platform handling continuous user deposits in Bitcoin, Ethereum and other digital assets, a repeat compromise raises pointed questions about key management practices, hot wallet segregation and whether lessons from the previous incident were fully implemented.
Disclaimer
In line with the Trust Project guidelines, please note that the information provided on this page is not intended to be and should not be interpreted as legal, tax, investment, financial, or any other form of advice. It is important to only invest what you can afford to lose and to seek independent financial advice if you have any doubts. For further information, we suggest referring to the terms and conditions as well as the help and support pages provided by the issuer or advertiser. MetaversePost is committed to accurate, unbiased reporting, but market conditions are subject to change without notice.
About The Author
Alisa, a dedicated journalist at the MPost, specializes in crypto, AI, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.
More articles
Alisa, a dedicated journalist at the MPost, specializes in crypto, AI, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.
