Crypto Casino Duelbits Hit With $7M Hack, Taken Offline

Duelbits Taken Offline Following Heist

A Duelbits founder who goes by the name Joe confirmed the hack and approximate damage in an X post on Thursday morning, writing that the firm is “still investigating exactly what happened and how.”

“Until we have clarity, Duelbits stays offline,” he wrote. “User funds are safe.”

Earlier Thursday morning, the platform’s official X account wrote that the company was “investigating a security incident affecting the site,” and that “as a precaution, the site has been taken offline while we investigate and work to ensure it is safe to restore service.”

Crypto security firms, including Scamsniffer and Peckshield reported suspicious outflows overnight, tracking approximately $4.9 million worth of funds leaving Duelbits hot wallets across the Ethereum, Bitcoin, BNB Chain, and Tron blockchain networks.

The funds included $2.23 million in ether, $680,000 worth of bitcoin, $1.62 million in USDT stablecoin, and $160,000 worth of BNB, along with smaller amounts of Tron’s TRX token and the shiba inu (SHIB) memecoin. Funds were quickly swapped for ether and DAI stablecoin, with Scamsniffer suspecting a private key compromise behind the attack.

“We got f—–. We’ll be back soon,” an X user named Jasper, identified as Duelbits’ CEO and affiliated with its official account, wrote on Thursday.

Another Hack for Duelbits

Duelbits has faced a similar scenario in the past. The platform saw $4.6 million worth of funds drained in February 2024, according to security firm Halborn, which wrote at the time that the “attacker exploited a security vulnerability to drain the tokens from the project’s hot wallet.”

Crypto platform hacks are common, and the tally has only risen of late, due in part to the growing availability of AI models capable of carrying out complex cyberattacks.

Security firm TRM Labs reported 207 individual crypto hacks in the first half of 2026, more than in any other six-month period recorded by the firm, tallying about $972 million worth of swiped funds. The majority of attacks were due to exploits of smart contracts that power decentralized finance platforms.