Permalink for this incident. Same content as the News feed. Use Share to post it.

← All news

Duelbits: co-founder confirms ~$7M multi-chain hot-wallet drain

highCEX / multi-chaincexUpdated

Update · 2026-10-09

On-chain message: Duelbits says it traced funds and offers a bounty deal

09 Oct Grok window: Defimon relayed an on-chain message (08 Oct) stating Duelbits has traced the funds and identified the person it believes is responsible, and offers a bounty deal for return of the rest.

No on-chain return reported yet.

Update · 2026-10-07

Rekt: ~$6.07M across five chains; repeat hot-wallet victim

07M across Ethereum, BNB, Tron, Solana, and Bitcoin, below the earlier ~$7M confirmation. Suspected private-key compromise of hot wallets. 6M theft in 2024.

Site reopened with the cause still undisclosed. No recovery or freeze reported.

24 Sep 2026: Crypto casino and sportsbook Duelbits saw large hot-wallet outflows. 3M on Ethereum and BNB; later tallies grew as Bitcoin, Solana, and other rails were included.

Co-founder Joe confirmed about $7M, kept the site offline pending investigation, and said other user funds were safe while hot wallets are rebuilt.

Reporting frames it as a suspected private-key compromise (same class as Duelbits’ 2024 incident). Research snapshot from Protos and founder posts.

369 take

Casino and exchange hot wallets are still just keys that can move the float. If you keep play money on a venue, size it as custody risk, not as on-chain DeFi.

Prefer withdraw after a session; rebuild announcements do not undo a compromised signer.

Sources