Crypto Casino Duelbits Offline Following 7 Million Dollar Hot Wallet Hack

The cryptocurrency gambling sector has been hit by another major security breach. On September 24, 2026, the platform Duelbits was forced to shut down its entire website after attackers successfully drained millions of dollars from the company's hot wallets. This incident follows a pattern of high-profile hacks targeting digital asset platforms, once again raising questions about the security of private keys and the risks associated with online crypto wallets.

According to initial reports from blockchain security firms, the attackers managed to exploit vulnerabilities across multiple networks simultaneously. The breach affected funds on Ethereum, BNB Chain, and Tron. Shortly after the initial discovery, it was confirmed that the company's Bitcoin holdings were also targeted. The speed and precision of the outflows suggest a sophisticated attack, likely involving the compromise of private keys, a method similar to previous major crypto heists in the industry.

Numbers and facts

The financial impact of the hack is significant, totaling approximately $7 million. Scam Sniffer, a blockchain security entity, first reported the incident, noting that funds were moved to newly created addresses. From the Ethereum hot wallet alone, 836 ETH, about $593,000 in USDT, $97,000 in USDC, 31,500 DAI, and a staggering 12.4 billion SHIB tokens were transferred within minutes. Following these transactions, the wallet was left with a balance of less than $25 in Ether.

Additionally, the company's Bitcoin wallet lost 8.1 BTC. Data from Etherscan shows that the attackers have consolidated most of the stolen assets into a single new address holding roughly 2,234 ETH, valued at approximately $6 million. As of the latest update, these funds have not been moved further. Prior to the breach, DappRadar ranked Duelbits 17th among tracked crypto casinos, with monitoring showing around $5.7 million in on-chain deposits.

Background

Joe, a co-founder of Duelbits, addressed the situation on the social media platform X. He confirmed the hack and stated that an investigation is currently underway to determine the exact nature of the breach. The platform decided to remain offline as a precautionary measure until the investigation is complete and the hot wallets are replenished to ensure operational stability.

"Confirmation of a hack of approx. $7M. Investigation still ongoing to determine exactly what happened and how. User funds are safe." - Joe, Co-founder of Duelbits

This event mirrors the 2023 attack on Stake, currently the largest crypto casino by volume, which saw $40 million stolen. Both cases highlight the vulnerability of hot wallets when private keys are compromised. While Duelbits maintains that user deposits were not affected, the total shutdown of the site indicates a serious breach of trust and technical integrity that may take significant time to repair.

Why it matters for German players

For players based in Germany, this incident serves as a stark reminder of the risks involved in using unregulated gambling platforms. Duelbits does not hold a license from the German Federal Gaming Authority (GGL) and is not included in the official whitelist. This means that German residents using the site have no legal recourse or protection in the event of a hack or financial loss. The German Interstate Treaty on Gambling 2021 (GlüStV 2021) was established to provide a secure environment, requiring operators to adhere to strict security standards. Unlicensed crypto casinos bypass these regulations, leaving users vulnerable to total loss without any governmental oversight or insurance.

What it means for GGL-licensed casinos

Casinos licensed under the GGL are required to implement robust security protocols far beyond those of typical offshore crypto sites. One of the primary requirements is the strict separation of player funds from operational capital, held in secure trust accounts. A hack of a company's hot wallet, as seen with Duelbits, would not jeopardize player balances in a regulated German environment in the same way. Furthermore, the use of cryptocurrencies for gambling is currently not permitted under German law due to AML (Anti-Money Laundering) concerns and the need for transparent payment tracking. This regulatory stance protects German consumers from the technical risks and volatility associated with blockchain-based gambling platforms.