Duelbits.com| Casino Sportsbook| Loss back | VIP| Instant Withdraws

[hosemary]

I just visited it and it still shows "under maintenance"!

I also see their maintenance message when trying to visit the website.
I visited Duelbits several times after the hack incident. I was able to see the Duelbits homepage a few times, but even on those occasions, I saw their maintenance message again after reloading the page.

Ambatman, reload the page and you will probably see their maintenance message again.
I hope everything will be back to normal soon.

[Haunebu]

Duelbits team posted an update earlier stating that they are performing final security checks to make sure everything is fully secure before fully bringing the site back online which is the right call since rushing could render the site prone to more attacks later.

Am pretty confident that they will return with upgraded security etc sooner rather than later, but I hope hackers didn't access users KYC information along with the 7 million regardless of what Duelbits stated.

[eaLiTy]

Duelbits team posted an update earlier stating that they are performing final security checks to make sure everything is fully secure before fully bringing the site back online which is the right call since rushing could render the site prone to more attacks later.

I am seriously curious to know what changes they made after the similar attack in February 2024, where $4.6 million was lost, and what additional security measures will be taken this time. Since @yahoo62278 mentioned something that is plausible in the other thread, I would like to get an answer on that, @duelbits.

Am pretty confident that they will return with upgraded security etc sooner rather than later, but I hope hackers didn't access users KYC information along with the 7 million regardless of what Duelbits stated.

Looks like only the hot wallet was breached and there is no mention of a database breach. If that is the case, then you don't need to worry about user credentials and KYC information.

[Free Market Capitalist]

It is hard to guess the net profit of a casino. Duelbits has a lot of games with different house edge. Let's assume the effective average house edge of the games is 3%. If the total deposited funds are wagered 5 times on average, then the total wager volume becomes $1 billion. Which makes the GGR around $30 million. Duelbits is spending at least 60% to 70%  of that GGR on bonuses, affiliate commissions, sponsorship deals, game providers commission, etc. So, their net profit could be above $10 million. The net profit could be more if the deposited funds are wagered more than 5 times on average.

After all, based on your reasoning, you're giving me figures similar to the ones the AI gave me.

Firstly, deposit volumes don't equal revenue which is why these figures don't really make much sense at all.

Why not? Doesn't Duelbits have wagering requirements? If so, deposits equal revenue.

Secondly, their net profit is probably lower than that figure though we are all just assuming.

"Probably" based on what? The AI gave me a reasoning, Mahdirakib posted a reasoning, you are not giving reasons to defend your "probably".

[Y3shot]

Duelbits team posted an update earlier stating that they are performing final security checks to make sure everything is fully secure before fully bringing the site back online which is the right call since rushing could render the site prone to more attacks later. Am pretty confident that they will return with upgraded security etc sooner rather than later,

In occurrence like this their is no other option than to make security tight and tough, because this hackers are like roaring lions, they dont get tired of trying.

but I hope hackers didn't access users KYC information along with the 7 million regardless of what Duelbits stated.

From the report everything that has to do with users are safe. The hackers only got access to the hot wallet which they succeeded in stealing funds.

[ultrloa]

Duelbits team posted an update earlier stating that they are performing final security checks to make sure everything is fully secure before fully bringing the site back online which is the right call since rushing could render the site prone to more attacks later.

I am seriously curious to know what changes they made after the similar attack in February 2024, where $4.6 million was lost, and what additional security measures will be taken this time. Since @yahoo62278 mentioned something that is plausible in the other thread, I would like to get an answer on that, @duelbits.

Although I'm not the one should answer this question, but will share what I know in that incident before. When duelbits got hacked before and reason is their private key got leak. They tried to limit or reduce their exposure on hot wallets.

As what I remember they tried to rotate their keys and did  a monitoring. Also if I'm right they used multisig and done independent audit before they decide to go back online.

But same incident happened and they suffered huge lose from that incident. Curious to know what other counter measures they planned to do, since experiencing same issues for second time around is really quiet disturbing.

[Hispo]

Duelbits team posted an update earlier stating that they are performing final security checks to make sure everything is fully secure before fully bringing the site back online which is the right call since rushing could render the site prone to more attacks later.

Am pretty confident that they will return with upgraded security etc sooner rather than later, but I hope hackers didn't access users KYC information along with the 7 million regardless of what Duelbits stated.

I just checked and it seems their casino is back on track, I was able to access to their dashboard. So I assume they are already recovered in the sense they can again allow people to gamble and bet in sports.
I would expect a lot of people to try to withdraw their money because of the initial scare of having their crypto on a casino which suffered such a huge vulnerability.

[Wind_FURY]

Duelbits team posted an update earlier stating that they are performing final security checks to make sure everything is fully secure before fully bringing the site back online which is the right call since rushing could render the site prone to more attacks later.

Am pretty confident that they will return with upgraded security etc sooner rather than later, but I hope hackers didn't access users KYC information along with the 7 million regardless of what Duelbits stated.

I just checked and it seems their casino is back on track, I was able to access to their dashboard. So I assume they are already recovered in the sense they can again allow people to gamble and bet in sports.

I would expect a lot of people to try to withdraw their money because of the initial scare of having their crypto on a casino which suffered such a huge vulnerability.

Plus allow their users to withdraw from the casino. I believe that should be a more important matter, and it will indicate that the casino is OK, and therefore help in making their users relaxed and have less possibility to panic.

Furthermore, exchanges and casinos are probably the most profitable companies in crypto. Duelbits will earn everything back, secure their systems, and move forward.

[Hispo]

Duelbits team posted an update earlier stating that they are performing final security checks to make sure everything is fully secure before fully bringing the site back online which is the right call since rushing could render the site prone to more attacks later.

Am pretty confident that they will return with upgraded security etc sooner rather than later, but I hope hackers didn't access users KYC information along with the 7 million regardless of what Duelbits stated.

I just checked and it seems their casino is back on track, I was able to access to their dashboard. So I assume they are already recovered in the sense they can again allow people to gamble and bet in sports.

I would expect a lot of people to try to withdraw their money because of the initial scare of having their crypto on a casino which suffered such a huge vulnerability.

Plus allow their users to withdraw from the casino. I believe that should be a more important matter, and it will indicate that the casino is OK, and therefore help in making their users relaxed and have less possibility to panic.

Furthermore, exchanges and casinos are probably the most profitable companies in crypto. Duelbits will earn everything back, secure their systems, and move forward.

In this case Duelbits is fortunate to be a very big, recognized and liquid company within the world of gambling and betting. Not all casinos in this ecosystem would be able to take a hit of over 7 million dollars and continue in business as if nothing had happened.

It reminds me when something similar happen to Stake, and Stake also continued as if something had happened.
But let us not be mistaken, if this happened to a smaller casino with a limited number of funds and gamblers, then everyone would have lost their money.

[Catenaccio]

Plus allow their users to withdraw from the casino. I believe that should be a more important matter, and it will indicate that the casino is OK, and therefore help in making their users relaxed and have less possibility to panic.

Safety first and they will have to check more carefully before allowing users to withdraw money. They will never want to open withdrawal feature too soon while there is risk of another wave of exploitation.

Sure if they're all done with security check and audits from third part companies, it will be time for reopening withdrawals for users, as like you said it will a confirmation that their casino is ok in finance and can return to normal operation soon.

Furthermore, exchanges and casinos are probably the most profitable companies in crypto. Duelbits will earn everything back, secure their systems, and move forward.

Quite true because if casinos are created to get money, not to lose money to gamblers, and if their business was not profitable, they would have not be able to come back so strong after their hack years ago in 2024.

Generally profitable or very profitable, they must spend more resources for security, and take security protection against hacks as main concern.

[Findingnemo]

~
Generally profitable or very profitable, they must spend more resources for security, and take security protection against hacks as main concern.

They will, 7 million is an amount that can be covered by the casino itself and fortunately they didn't lose big like bitget which is over 170 mil at the same time. But they need to find the root cause and also opening the withdrawal immediately even if they found out the cuase can end in a chaos because everyone will rush into withdrawal, so they have to do it in the multiple stages.

[JiiBs]

~
Generally profitable or very profitable, they must spend more resources for security, and take security protection against hacks as main concern.

They will, 7 million is an amount that can be covered by the casino itself and fortunately they didn't lose big like bitget which is over 170 mil at the same time. But they need to find the root cause and also opening the withdrawal immediately even if they found out the cuase can end in a chaos because everyone will rush into withdrawal, so they have to do it in the multiple stages.

There isn’t any serious business that would go through this form of authorized access (hack), leading to loss of company funds and possibly other credentials that wouldn’t take the next step in ensuring a tight security of their site and investigate what seems to be the root cause of what’s going on or potentially recover their money. Good thing Duelbits has acknowledged and issued a statement on it, the site continues to be unplugged while the investigation continues. We would be sure to have them back in not time but until they have done their checks to determine the extent of the bridge and how secure it is to do business, we wouldn’t expect any rush actions to plug back the site.

[ColdLava40]

In this case Duelbits is fortunate to be a very big, recognized and liquid company within the world of gambling and betting. Not all casinos in this ecosystem would be able to take a hit of over 7 million dollars and continue in business as if nothing had happened.

It reminds me when something similar happen to Stake, and Stake also continued as if something had happened.
But let us not be mistaken, if this happened to a smaller casino with a limited number of funds and gamblers, then everyone would have lost their money.

Been trying to follow up with the whole duelbits hack saga that happened and I just say it was devastating.

Site was down and on X so many comments of scared players. I'm happy they are finally back and running. Duelbits is still a big brand which I'm sure will not be behind Schedule.

It would take a while but they will recover their losses most probably soon. The main thing now is making sure these loopholes are found and ensure their hot wallets are secured enough so it doesn't reoccur again in the future.

[Odusko]

~
Generally profitable or very profitable, they must spend more resources for security, and take security protection against hacks as main concern.

They will, 7 million is an amount that can be covered by the casino itself and fortunately they didn't lose big like bitget which is over 170 mil at the same time. But they need to find the root cause and also opening the withdrawal immediately even if they found out the cuase can end in a chaos because everyone will rush into withdrawal, so they have to do it in the multiple stages.

Casino that have big name in the market know how to handle this kind of incident, although is quite unfortunate that losing such amount to hacker's and a beat on their vulnerability, a lot of work need to be done, and good to see that the casino is back live online again and we can try to see if all gaming and transactions activities resumed back in full, but the ultimate joy is that we are here now and hoping to move on to better future after the bad incident.

[Forsyth Jones]

The site was accessible, I tried to log in but couldn't (my account has 2FA enabled) and it showed an error message (not found). Now the site appears to be under maintenance again on my end. I believe they are in the final process of this.

I'm very happy that they managed to refill the hot wallets after the attack.

[Findingnemo]

~
I'm very happy that they managed to refill the hot wallets after the attack.

You mean they already funded the existing hot wallet addresses? If yes then it is not good even if they found that the hack happened due to the backend leak not due to the actual exposure of the wallet private keys, still is is better to use different ones from now on.

I checked the link from signature and it keep on loading, might be they are working behind the scene actively.

[Odusko]

The site was accessible. I tried to log in but couldn't (my account has 2FA enabled) and it showed an error message (not found). Now the site appears to be under maintenance again on my end. I believe they are in the final process of this.

Same response from my end too, I tried logging in and the error messenge that account not fund, this suggests that there is still ongoing work with the maintenance but progress so far, and just as earlier said the site was scheduled for maintenance within this time frame before the hack incident happened.

I'm very happy that they managed to refill the hot wallets after the attack.

I don't see any information like that anywhere. Do you see any announcements from the team that the hot wallet has been refilled? Share the link.

[Asiska02]

Am pretty confident that they will return with upgraded security etc sooner rather than later, but I hope hackers didn't access users KYC information along with the 7 million regardless of what Duelbits stated.

This is very important because this is where sensitive informations are and I hope they haven’t breach into that also. Whatever it maybe, it can’t be disclosed whether they accessed there or not and not everyone will still be convinced that they did not. Do hackers really care about that after stealing such big amount of money? I really doubt so.

I don't see any information like that anywhere. Do you see any announcements from the team that the hot wallet has been refilled? Share the link.

There was an information regarding them refilling the hot wallet and come back in action again, can’t really remember where I saw that but was from a legitimate source of the company. If they’ve returned back to operation, they prolly must have the wallet refilled already.

[greysonz]

The site is back online: when I visited their website, I found it opened with the same interface as before the hack.



Hot wallets have been refilled.
https://x.com/Duelbits/status/2103816082326995049
Well, obviously, if they're working again.

Overall, I'm happy for you, Duelbits

[Hispo]

In this case Duelbits is fortunate to be a very big, recognized and liquid company within the world of gambling and betting. Not all casinos in this ecosystem would be able to take a hit of over 7 million dollars and continue in business as if nothing had happened.

It reminds me when something similar happen to Stake, and Stake also continued as if something had happened.
But let us not be mistaken, if this happened to a smaller casino with a limited number of funds and gamblers, then everyone would have lost their money.

Been trying to follow up with the whole duelbits hack saga that happened and I just say it was devastating.

Site was down and on X so many comments of scared players. I'm happy they are finally back and running. Duelbits is still a big brand which I'm sure will not be behind Schedule.

It would take a while but they will recover their losses most probably soon. The main thing now is making sure these loopholes are found and ensure their hot wallets are secured enough so it doesn't reoccur again in the future.

If you want my opinion, these kinds of attacks are likely to continue to happen in the future, because in the end of the day, we are talking about hot wallets... Wallets which are connected to the internet so they are vulnerable to be hijacked and messed up with. The best approach casinos can take, besides of advance improvement on their cyber security is also keeping less funds in their hot wallets and more the most of the money to their cold wallets. It may make high withdrawals to take some more time, but I think it is a sacrifice which is worth considering.