Duelbits Crypto Casino Loses $4.2M in Theft via Cross-Chain Bridge

iconBitMedia
Share
AI summary iconSummary
On-chain data shows that Duelbits, a crypto casino, lost over $4.2 million after an unknown attacker exploited a cross-chain bridge. The theft included 836 ETH, 1.146 million USDT, and other tokens. PeckShield’s on-chain analysis traced the funds to a malicious address, where they were swiftly converted into ETH and DAI. The attacker used deBridge and Relay: Router V3 to transfer the assets. This marks Duelbits’ second major theft, following a $4.64 million loss in February 2024.

A total of 836 ETH worth $2.23 million, 1.146 billion USDT stablecoins, 209 BNB valued at $160,680, 96,805 USDC, 12.3 billion SHIB worth $70,170, and 31,515 DAI were withdrawn from the platform. PeckShield experts identified the recipient as the attacker, as the withdrawn assets were quickly converted into 1,587 ETH worth $4.2 million and 31,500 DAI.

PeckShield did not clarify how access to the casino funds was obtained or whether customer balances were affected.

According to Ethereum blockchain explorer Etherscan, on September 24, several incoming transactions were observed from a crypto address owned by Duelbits to an address beginning with 0xA77e24 and ending in 05aef76. These included exactly 31,515 DAI, approximately 12.4 billion SHIB, 96,804 USDC, and 593,430 USDT. The explorer identified Duelbits as the original source of funds sent to this address.

Subsequently, the unknown recipient began transferring assets to addresses associated with cross-chain bridges. 96,804 USDC was sent to an address labeled as deBridge. In a separate transaction, approximately 6.4 billion SHIB were transferred to the same address, followed by four additional SHIB transactions, each ranging from 1 billion to 2 billion tokens. Thus, the total outbound SHIB volume reached approximately 12.4 billion. Six transfers of 100,000 USDT each were also recorded to the address Relay: Router V3, followed by one additional transaction of 83,346 USDT. The total amount of these seven transactions amounted to 683,346 USDT. After all these operations, the Ethereum address retained 1,587 ETH and 31,515 DAI, with a combined value of $4.22 million.

More than two years ago, the crypto casino Duelbits suffered a hacker attack. In February 2024, the platform’s wallet was compromised, resulting in losses of $4.64 million. The assets stolen during that incident were also transferred via a cross-chain bridge and exchanged for ether.


Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.