Duelbits Confirms $7 Million Hot Wallet Breach, Takes Platform Offline Crypto casino Duelbits has acknowledged a cybersecurity incident resulting in the theft of approximately $7 million from its hot wallets, forcing the platform to suspend operations while investigators assess the breach. The company confirmed the attack on September 24, 2026, after blockchain security firm Scam Sniffer detected suspicious withdrawals totaling $4.2 million across Ethereum, BNB Chain, and Tron. The attackers drained assets from multiple wallets, including 836 ETH (~$2.3M), 593,000 USDT, 97,000 USDC, 31,500 DAI, and 12.4 billion SHIB on Ethereum, along with 209 BNB and 192,000 TRX on other chains. An additional 8.1 BTC was later identified as stolen from Duelbits’ Bitcoin hot wallet, bringing the total loss to $7 million. Most stolen funds were consolidated into 2,234 ETH (~$6M) in a single address, a tactic that simplifies control but leaves a traceable on-chain trail. Duelbits co-founder Joe stated that customer funds remain secure and that the platform will resume operations after completing its investigation and replenishing affected wallets. The company has not yet released a root-cause analysis, though security researchers suspect a private-key compromise a scenario where attackers gain control of wallet-signing credentials rather than exploiting a smart-contract flaw. The platform’s recovery plan includes rotating credentials, rebuilding transaction infrastructure, and launching "Duelbits 2.0" to enhance security. Engineers are currently reconstructing deposit and withdrawal servers, with an estimated 15-hour timeline for restoration. While Duelbits has not disclosed the initial access vector or whether third-party investigators are assisting, the company has committed to issuing an official statement within 24 hours. The incident highlights the risks of hot wallet custody in cryptocurrency platforms, where rapid fund consolidation by attackers can complicate recovery efforts. Duelbits has urged users to rely only on verified channels for updates amid potential phishing risks following the breach.