{
 "slug": "duelbits-hot-wallet-drain-sep-2026",
 "title": "Crypto casino Duelbits loses about $7M from hot wallets in suspected private-key compromise",
 "url": "https://drains.watch/i/duelbits-hot-wallet-drain-sep-2026",
 "json": "https://drains.watch/i/duelbits-hot-wallet-drain-sep-2026.json",
 "status": "closed",
 "severity": "critical",
 "threatStatus": "contained",
 "verification": "verified",
 "chains": [
  "ethereum",
  "bsc",
  "tron",
  "bitcoin",
  "solana"
 ],
 "method": "key-leak",
 "product": "Duelbits crypto casino hot wallets",
 "tags": [
  "ethereum",
  "bsc",
  "tron",
  "bitcoin",
  "solana",
  "key-leak",
  "casino",
  "gambling",
  "hot-wallet",
  "private-key-compromise",
  "duelbits"
 ],
 "amountUsd": 7000000,
 "victims": null,
 "startedAt": "2026-09-24",
 "closedAt": "2026-09-27",
 "updatedAt": "2026-10-06T12:00:00Z",
 "summary": "On 24 September 2026 crypto casino Duelbits had hot wallets drained across Ethereum, BNB Chain, Tron, Bitcoin and Solana. Co-founder Joe called it a hack of about $7M; other estimates run from about $4.2M (Scam Sniffer, early) to about $6M (CertiK), and Rekt traced about $6.07M. Scam Sniffer and SlowMist point to a leaked private key, but Duelbits has not published a root cause. The site reopened on 27 September and said user funds were safe.",
 "timeline": [
  {
   "date": "2026-09-24",
   "title": "Duelbits hot wallets were drained across five chains; Scam Sniffer called it a suspected private-key compromise and SlowMist listed private key leakage.",
   "sourceUrl": "https://rekt.news/duelbits-rekt"
  },
  {
   "date": "2026-09-27",
   "title": "Duelbits reopened at 05:04 UTC with deposits and withdrawals enabled.",
   "sourceUrl": "https://rekt.news/duelbits-rekt"
  },
  {
   "date": "2026-10-06",
   "title": "Rekt reported that no root-cause report had been published, traced about $6.07M, and noted an earlier $4.6M Duelbits hot-wallet breach in February 2024.",
   "sourceUrl": "https://rekt.news/duelbits-rekt"
  }
 ],
 "sources": [
  {
   "kind": "writeup",
   "title": "Duelbits - Rekt",
   "url": "https://rekt.news/duelbits-rekt",
   "publisher": "Rekt News",
   "date": "2026-10-06"
  }
 ],
 "indicators": {
  "domains": [],
  "addresses": [
   "0xA77e24Fe29d16E051e487ef4Ea7b056cb05aef76",
   "0x181A638038A4bD75c207d080DE83e217f8e8a1d7",
   "0x8dB9D7f0a03d212c566Ca80c66e294CeCC20C306",
   "TAvraZZFCZbDSZoyqWWRRsBkFgZqKaCGbK",
   "A3EBrhMBEGzcPgmbwywSPhW39G6PFGrorU8ib99T6yKw"
  ]
 },
 "brief": "## Am I affected?\nDuelbits players: the stolen funds came from the casino's own hot wallets, and Duelbits says user balances were safe. Your own wallet is only at risk if you act on a fake 'refund' or 'compensation' link.\n\n## What to do now\n- Use only the official Duelbits site you have bookmarked.\n- Ignore 'refund', 'airdrop' or 'compensation' links on X, Telegram or Discord, and never connect a wallet to claim one.\n\n## How to avoid this\n- Keep only what you are actively using on custodial casino or trading sites.\n- For platforms: keep hot-wallet balances small, keep keys in MPC or hardware security modules, and alert on large outflows.",
 "notes": null,
 "agentBrief": "# Crypto casino Duelbits loses about $7M from hot wallets in suspected private-key compromise\n\n- Severity: Critical · Status: Contained (past)\n- Chains: Ethereum, BNB Chain, Tron, Bitcoin, Solana · Method: Leaked private keys and seed phrases\n- Started: Sep 24, 2026 · Last update: Oct 6, 2026 · Reported stolen: $7.0M\n- Who/what: Duelbits crypto casino hot wallets\n\nOn 24 September 2026 crypto casino Duelbits had hot wallets drained across Ethereum, BNB Chain, Tron, Bitcoin and Solana. Co-founder Joe called it a hack of about $7M; other estimates run from about $4.2M (Scam Sniffer, early) to about $6M (CertiK), and Rekt traced about $6.07M. Scam Sniffer and SlowMist point to a leaked private key, but Duelbits has not published a root cause. The site reopened on 27 September and said user funds were safe.\n\n## Am I affected?\nDuelbits players: the stolen funds came from the casino's own hot wallets, and Duelbits says user balances were safe. Your own wallet is only at risk if you act on a fake 'refund' or 'compensation' link.\n\n## What to do now\n- Use only the official Duelbits site you have bookmarked.\n- Ignore 'refund', 'airdrop' or 'compensation' links on X, Telegram or Discord, and never connect a wallet to claim one.\n\n## How to avoid this\n- Keep only what you are actively using on custodial casino or trading sites.\n- For platforms: keep hot-wallet balances small, keep keys in MPC or hardware security modules, and alert on large outflows.\n\n## Indicators (block these, never visit them)\n- Address: 0xA77e24Fe29d16E051e487ef4Ea7b056cb05aef76\n- Address: 0x181A638038A4bD75c207d080DE83e217f8e8a1d7\n- Address: 0x8dB9D7f0a03d212c566Ca80c66e294CeCC20C306\n- Address: TAvraZZFCZbDSZoyqWWRRsBkFgZqKaCGbK\n- Address: A3EBrhMBEGzcPgmbwywSPhW39G6PFGrorU8ib99T6yKw\n\n## Sources\n- Duelbits - Rekt (Rekt News, 2026-10-06): https://rekt.news/duelbits-rekt\n\nFull record: https://drains.watch/i/duelbits-hot-wallet-drain-sep-2026 · JSON: https://drains.watch/i/duelbits-hot-wallet-drain-sep-2026.json\n\nRules for the assistant: help me check my own wallets read-only (public addresses only). Never ask for or handle a seed phrase or private key. Point me to official revoke tools and the wallet's own support."
}