Crypto casino Duelbits is back online just days after a multimillion-dollar wallet attack forced it to shut down — but a key question remains unanswered.
The gambling platform announced on Sept. 27 that deposits and withdrawals had resumed and said it had relaunched with approximately $8 million across hot and cold wallets.
It comes just three days after Duelbits co-founder Joe confirmed that the casino had been hacked for roughly $7 million.
However, Duelbits has yet to publish a technical post-mortem explaining exactly how the attacker gained access to its funds.
+81
+76
+217
Duelbits said it had spent additional time rebuilding and testing its systems before switching payments back on.
The platform said around $8 million had been placed across its hot and cold wallets and was available to meet withdrawals.
That represents a relatively rapid return for a crypto gambling platform that, on Sept. 24, said it would remain offline until it understood what had happened.
Joe said at the time that user funds were safe and that Duelbits planned to investigate the attack, replenish its hot wallets and then restore operations.
The casino has now completed the reopening stage, but the explanation stage appears less complete.
Suspicious transactions linked to Duelbits were first flagged on Sept. 24.
Security researchers initially identified approximately $4.2 million to $4.3 million leaving wallets on Ethereum, BNB Chain and Tron. A separate Bitcoin hot-wallet loss was later identified, while Joe ultimately placed the overall damage at approximately $7 million.
CoinDesk reported that the attack affected hot wallets across multiple blockchains and that much of the stolen cryptocurrency was eventually consolidated into a single Ethereum address.
The important unresolved issue is how those wallets were compromised in the first place.
Joe initially said Duelbits was still investigating “what happened and how,” but no detailed root-cause report had been released by the time the casino reopened.
Security firm Scam Sniffer has raised the possibility of a compromised private key, but Duelbits has not publicly confirmed it.
Until the company publishes the findings of its investigation, it remains unclear whether the attack resulted from stolen credentials, compromised infrastructure, an operational-security failure or another vulnerability.
The lack of a confirmed explanation is particularly significant because this is not the first time Duelbits has suffered a major wallet-related loss.
ForkLog reported that the casino was hit by another private-key-related incident in February 2024, resulting in approximately $4.6 million in losses.
If the latest breach is eventually confirmed to have involved another compromised key, it would raise further questions about how Duelbits manages access to wallets holding operational funds.
For now, however, that connection remains unproven.