What happened
On September 24, 2026, attackers drained about $7 million from the hot wallets of crypto casino Duelbits on Ethereum, BNB Chain, Tron and Bitcoin. Scam Sniffer first flagged the suspicious withdrawals. On Ethereum they included 836 ETH, about 593,000 USDT, 97,000 USDC, 31,500 DAI and 12.4 billion SHIB.
The attackers also took 209 BNB, 192,000 TRX and 8.1 BTC. They swapped most of the stolen tokens to ETH and pooled them in one address, 0x8db9d7f0a03d212c566ca80c66e294cecc20c306, which held about 2,234 ETH (about $6 million) when CoinDesk reported. Co-founder Joe confirmed a hack of about $7 million and said user funds were safe.
Duelbits took the site offline to investigate and refill its hot wallets, and planned to return as "Duelbits 2.0". Observers suspect a private-key compromise, but Duelbits has not published a technical explanation.
Protocol details
Evidence
- report @PeckShieldAlert incident report x.com
- report @CertiKAlert incident report x.com
- analysis DeFiLlama defillama.com
- analysis Hackers drain $7 million from crypto casino Duelbits in suspected private key compromise coindesk.com
- analysis Duelbits Confirms $7 Million Hot-Wallet Hack, forcing Systems offline cybersecuritynews.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
