Duelbits Suffers $4.9 Million Loss from Hot Wallet Compromise
Duelbits experienced a suspected private key compromise affecting its multi-chain hot wallets. Approximately $4.9 million was transferred to newly created addresses, prompting the site to go offline for investigation.
Our full investigation: Duelbits hack: five chains drained into one wallet, and 1,370 ETH now in Tornado Cash
Duelbits, a crypto casino, reported a suspected compromise of its multi-chain hot wallets, which include Ethereum, BSC, Tron, and Bitcoin. This incident resulted in the transfer of about $4.9 million to newly created addresses. Following the discovery of the breach, the site was taken offline to conduct a thorough investigation into the incident.
The mechanism of the breach appears to involve a compromise of the private keys associated with the hot wallets. Most of the stolen funds were subsequently swapped to ETH, indicating an attempt to obscure the trail of the stolen assets. The specific chains affected include Ethereum, BSC, Tron, and Bitcoin, which may complicate tracing efforts across different networks.
The on-chain record shows that the funds were moved to newly created addresses, but specific address details were not provided. The actions taken by Duelbits to take the site offline suggest a proactive approach to mitigate further losses and assess the security of their systems.
Addresses in this incident
Roles are attributed to the source that stated them. Addresses without an attributed role are listed because coverage mentioned them, not because we assign them a part in the incident.