Duelbits Hacked: $7 Million Drained From Crypto Wallets, What Players Need to Know

What happened at Duelbits?

On 24 September 2026, crypto casino and sportsbook Duelbits took its site offline after attackers drained roughly $7 million from the platform's hot wallets. Blockchain security firm Scam Sniffer first flagged the outflows, watching funds leave Duelbits wallets on Ethereum, BNB Chain, Tron, Solana and Bitcoin within minutes of each other.

Duelbits co-founder Joe confirmed the incident on X, writing: "Confirming a ~$7M hack. Still investigating exactly what happened and how. User funds are safe." The platform said it would stay offline until the investigation finished and its hot wallets were refilled.

The speed and coordination of the attack is what stands out. Five separate chains were drained almost simultaneously, which points to one thing: the attacker held the signing keys for every wallet at once.

A suspected private key compromise

Investigators believe this was a private key compromise rather than a smart contract exploit. The transactions were plain transfers signed by the wallets themselves, not malicious contract calls. Whoever moved the funds had direct access to the keys.

On Ethereum alone, the hot wallet sent out 836 ETH, about 593,000 USDT, 97,000 USDC, 31,500 DAI and 12.4 billion SHIB within minutes, leaving less than $25 behind. The Bitcoin hot wallet lost 8.1 BTC, and another 209 BNB left the BNB Chain wallet.

Almost everything was then swapped into ether and consolidated into a single address holding around 2,334 ETH, worth roughly $6.2 million. On-chain investigators later watched about 1,370 ETH move into Tornado Cash, a mixing service, through four fresh wallets.

Are user funds safe?

According to Duelbits, yes. The co-founder stated clearly that user funds are safe, and the loss appears limited to the platform's operational hot wallets rather than customer balances. The site stayed offline as a precaution while wallets were refilled and the investigation continued.

That said, this is exactly the kind of moment where players should pay attention. When a crypto casino goes offline after a hack, the smart move is to wait for official confirmation before depositing again, and to keep only what you are actively playing with on any platform.

A familiar pattern: the Stake hack of 2023

This is not the first time a major crypto casino has been hit this way. In 2023, Stake, the largest crypto casino by volume, lost around $40 million in a private key compromise that followed an almost identical pattern. Hot wallets are convenient for instant withdrawals, but they are also the biggest target on any crypto gambling site.

The lesson for the whole industry is the same: the more funds a casino keeps in hot wallets to pay out quickly, the larger the prize for anyone who gets the keys.

What this means for crypto casino players

Incidents like this are a good reminder of a few golden rules for playing at any crypto casino, bitcoin casino or USDT casino:

1. Only keep your active bankroll on a casino. Treat it like a casino wallet, not a savings account.
2. Withdraw winnings promptly to a wallet you control, ideally a hardware wallet for larger amounts.
3. Use casinos with a strong track record of honouring withdrawals after security incidents.
4. Enable every security feature available on your account, including two factor authentication and withdrawal address whitelisting.
5. Follow on-chain investigators and official channels so you hear about incidents early.

If you want a deeper dive on protecting your funds, read our guide to the best crypto wallets for gambling and our provably fair casino guide.

Playing it safe: trusted alternatives

While Duelbits investigates, players looking for a trusted crypto casino with fast withdrawals have solid options. BetPlay.io tops our list right now, with a 100% welcome bonus up to $5,000 in USDT plus 10% cashback, instant payouts and a strong security track record. BetFury is another favourite, offering a welcome package worth up to 1 BTC, daily rakeback and a huge selection of provably fair originals. BC.Game rounds out the top three with thousands of crypto slots, live dealer tables and same day withdrawals.

Whichever crypto casino you choose, the Duelbits hack is a timely reminder that security habits matter just as much as bonuses. Play smart, withdraw often and never leave more on a site than you can afford to lose.

Final thoughts

The Duelbits hack is one of the biggest crypto casino security incidents of 2026, and the investigation is still ongoing. The good news is that user funds appear untouched, and the platform has been transparent about what happened. The bad news is that private key compromises keep happening across the industry, and players are the ones who feel the fallout when sites go dark.

Stay tuned to the blog for updates as the story develops, and as always, gamble responsibly. If gambling stops being fun, our post on taking a break from gambling is worth a read.