Crypto betting platform Duelbits has taken its website offline after confirming a major security breach that drained millions of dollars from its hot wallets.
Initial reports put the value of the stolen cryptocurrency at approximately $7 million. However, blockchain-security firm SlowMist's incident database currently records about $4.9 million transferred to newly created addresses. The difference appears to reflect changing asset valuations, additional transfers and the fact that investigators are still tracking the incident.
The attack affected Duelbits' hot-wallet infrastructure across multiple blockchain networks. Security researchers have identified suspicious transactions involving Ethereum, BNB Chain, Tron and Bitcoin.
Duelbits co-founder Joe confirmed the incident and said the company was investigating exactly what happened and how the attackers gained access.
The platform has remained offline while the investigation continues and the company works on replenishing its affected wallets.
This makes the Duelbits incident one of several significant crypto-security events reported within a very short period, following the much larger Bitget breach disclosed on September 24.
What Happened to Duelbits?
The first signs of the attack came from blockchain monitoring systems that detected unusual outflows from wallets associated with Duelbits.
According to reporting from CoinDesk and other security-focused publications, attackers drained assets from Duelbits' hot wallets and moved the funds to newly created addresses. CoinDesk reported the stolen value at approximately $7 million.
SlowMist's incident database provides a more conservative on-chain figure of approximately $4.9 million transferred from the affected wallets. It lists the suspected attack method as a private-key compromise.
Because the investigation is still developing, the dollar amount should be treated as an estimate rather than a final confirmed loss figure.
Duelbits subsequently took the platform offline while its team investigated the breach.
Which Blockchains Were Affected?
The incident was not limited to a single blockchain.
Security researchers identified suspicious activity involving Duelbits wallets connected to Ethereum, BNB Chain, Tron and Bitcoin.
This is significant because a multi-chain hot-wallet environment can increase the complexity of incident response. Investigators must monitor multiple networks, identify related addresses and determine whether the same attacker controls the receiving wallets.
SlowMist specifically lists Ethereum, BSC, Tron and Bitcoin in its incident record for Duelbits.
AmbCrypto also reported that suspicious transfers were initially detected on BNB Chain, Ethereum and Tron before an additional Bitcoin wallet outflow was identified.
Why the $7 Million Figure Is Different From SlowMist's $4.9 Million
One of the most important details when reporting the Duelbits hack is the difference between the headline loss estimate and the amount currently tracked by blockchain-security researchers.
Several reports describe the incident as a roughly $7 million hack. CoinDesk, for example, reported that attackers drained approximately $7 million from Duelbits' hot wallets.
SlowMist's current hacked-project database, however, lists approximately $4.9 million as the amount transferred to newly created addresses.
These numbers should not automatically be treated as contradictory.
Crypto-security investigations often produce changing estimates because token prices move rapidly, some transfers may be discovered later and different researchers may calculate the value at different points in time.
For that reason, this article uses approximately $7 million when describing the broader media-reported incident while separately identifying SlowMist's currently tracked $4.9 million figure.
Was a Private Key Compromised?
The leading technical theory is a private-key compromise affecting Duelbits' hot-wallet infrastructure.
SlowMist currently categorizes the incident as Private Key Leakage. Its incident record says the multi-chain hot wallets suffered a suspected private-key compromise and that approximately $4.9 million was transferred to newly created addresses, with most of the funds subsequently swapped into ETH.
That does not mean the final root cause has been conclusively established.
Duelbits co-founder Joe said the company was still investigating exactly what happened and how, indicating that the technical investigation was not complete when the incident was publicly confirmed.
The distinction matters because a compromised private key, leaked credentials, malware infection or another operational-security failure can produce similar on-chain symptoms while requiring very different remediation.
What Happened to the Stolen Crypto?
Blockchain investigators have been tracking the funds after they left Duelbits-controlled wallets.
According to current reporting, a large portion of the stolen assets was consolidated and converted into Ethereum.
One report said approximately 2,234 ETH, worth close to $6 million at the time of reporting, had been consolidated into a single Ethereum address and remained there.
SlowMist similarly reported that most of the funds it tracked were swapped into ETH.
This type of consolidation can make an incident easier for blockchain analysts to monitor because multiple stolen assets end up in fewer addresses.
However, tracking cryptocurrency does not automatically mean that the funds can be recovered.
Can the Stolen Funds Be Frozen?
The answer depends on the type of cryptocurrency involved.
Native assets such as Bitcoin and Ether generally cannot be frozen at the blockchain-protocol level simply because investigators identify them as stolen.
Recovery can instead depend on the attacker attempting to move the funds through centralized exchanges, custodial services or other identifiable intermediaries.
Some stablecoins work differently because their issuers can have address-freezing capabilities under specific circumstances.
That means investigators may have more options for certain stablecoin assets than they do for native cryptocurrencies.
The ultimate recovery prospects therefore depend heavily on where the stolen funds move next and whether investigators can connect those movements to identifiable services or individuals.
Duelbits Takes the Platform Offline
Following the breach, Duelbits took its platform offline.
The company's co-founder said the team was investigating the incident and that operations would resume after the investigation and wallet-replenishment process were completed.
The decision to shut down the platform is significant because hot wallets are normally used to process routine deposits and withdrawals.
Keeping the platform offline can limit additional exposure while the company checks wallet infrastructure and determines whether other operational systems have been affected.
At the time of publication, Duelbits had not provided a final technical explanation for how the attackers gained access.
Are User Funds Safe?
Duelbits has said that user funds remain safe, according to reporting on the incident.
However, users should distinguish between a company's statement about customer balances and an independently verified forensic assessment.
The investigation is still underway, and the platform remains offline while the company examines the breach.
Until a full incident report is released, the precise scope of the compromise should be treated as developing information.
Why Hot Wallets Are a Security Risk
The Duelbits incident illustrates a basic trade-off in cryptocurrency custody.
Hot wallets are connected to online systems and allow platforms to process transactions quickly. That makes them useful for exchanges, payment platforms and crypto casinos that need to handle frequent deposits and withdrawals.
The same connectivity can also increase their exposure to cybersecurity threats.
A cold wallet is generally kept offline or otherwise isolated from routine online operations. That can make direct remote attacks more difficult, although cold storage does not eliminate every form of security risk.
For platforms handling significant amounts of cryptocurrency, the challenge is therefore not simply deciding between hot and cold storage. Security also depends on key management, access controls, transaction approvals, monitoring systems and procedures for detecting unusual transfers.
Duelbits Hack Comes During a Busy Day for Crypto Security
The Duelbits breach did not happen in isolation.
On the same day, blockchain-security researchers also reported major incidents involving Bitget, Meter Passport and Payy Network.
Protos reported that three separate crypto and DeFi incidents on Thursday resulted in more than $11 million in combined losses, including approximately $7 million at Duelbits, $2.3 million involving Meter and $1.8 million at Payy Network.
Bitget's separate incident was considerably larger, with the exchange reporting approximately $351.6 million in affected assets.
The concentration of security incidents within such a short period highlights how quickly risk can spread across different parts of the digital-asset ecosystem.
What Investigators Will Look For Next
The next stage of the Duelbits investigation will focus on identifying the initial point of compromise.
Investigators will likely examine how the attackers obtained access to the hot-wallet keys, whether the same credentials were used across multiple blockchain networks and whether any other wallets remain exposed.
They will also continue following the stolen assets.
Blockchain transactions provide a permanent public record, which allows researchers to monitor the receiving addresses even after the initial theft.
The important question is what happens when the funds reach services that can identify customers or potentially intervene in transactions.
Duelbits' eventual technical report should also clarify whether the incident resulted from a direct private-key leak, an operational-security failure or another form of compromise.
What the Duelbits Hack Does Not Prove
The current evidence does not establish every detail of the attack.
In particular, the suspected private-key compromise remains the current security-research classification rather than a final forensic conclusion from Duelbits.
The incident also does not establish that every asset held by Duelbits was exposed.
Similarly, the approximately $7 million media figure should not be interpreted as a final audited loss figure while blockchain researchers continue updating their estimates.
These distinctions are important because crypto-security incidents can evolve quickly as additional addresses and transactions are identified.
Duelbits Hack: Key Facts at a Glance
| Detail | Current information |
|---|---|
| Platform | Duelbits |
| Incident | Hot-wallet security breach |
| Reported loss | Approximately $7 million in current media reports |
| SlowMist tracked amount | Approximately $4.9 million transferred |
| Affected networks | Ethereum, BNB Chain, Tron and Bitcoin |
| Suspected method | Private-key compromise |
| Platform status | Offline during investigation |
| User-fund statement | Duelbits says user funds are safe |
| Investigation status | Ongoing |
Bottom Line
The Duelbits crypto hack has taken the platform offline after attackers drained millions of dollars from its hot-wallet infrastructure across multiple blockchain networks.
Current media reports describe the incident as an approximately $7 million hack, while SlowMist's incident database currently tracks approximately $4.9 million transferred to newly created addresses. The difference reflects the developing nature of the investigation and changing crypto valuations.
Security researchers currently classify the incident as a suspected private-key compromise, but Duelbits has not yet published a complete technical explanation of the root cause.
The attackers appear to have consolidated much of the stolen cryptocurrency into Ethereum, giving blockchain investigators identifiable addresses to monitor.
Duelbits has taken the platform offline and said it is investigating the incident before replenishing its wallets and resuming operations.
The biggest unanswered question is therefore not simply how much cryptocurrency was stolen, but how the attackers gained control of the hot-wallet infrastructure and whether the security weakness has been completely contained.
The Duelbits investigation is ongoing, and loss estimates, wallet movements and technical findings may change as additional information becomes available.
Sources
- CoinDesk — September 24, 2026: Coverage of the Duelbits $7 million hot-wallet hack and platform shutdown.
- SlowMist — September 24, 2026: Hacked Project Database entry for Duelbits, including the approximately $4.9 million tracked transfer and suspected private-key compromise.
- AMB Crypto — September 24, 2026: Reporting on the multi-chain wallet outflows and Duelbits' confirmation of the incident.
- Protos — September 25, 2026: Coverage of Duelbits, Payy Network and Meter incidents occurring within the same period.
- Duelbits co-founder statement — September 24, 2026: Confirmation of the approximately $7 million hack and ongoing investigation.
Disclaimer: This article is for informational purposes only and does not constitute financial, investment, trading or cybersecurity advice. Cryptocurrency and digital-asset platforms involve significant risks. Readers should verify important information through official sources before making financial decisions.
0 Comments