Duelbits getting drained?

[Julien_Olynpic]

$7 million is a significant sum, but in reality, it's the price to pay for inadequate risk management related to hot cryptocurrency wallets. Now, scammers and hackers, armed with cheap artificial intelligence, will try to hack any platform that isn't sufficiently scrupulous about its security. It's a kind of natural selection by hackers and artificial intelligence. Hackers and scammers do terrible things, but the paradox is that this is precisely how they can force gambling site owners to stop being careless.

[TheUltraElite]

Hackers and scammers do terrible things, but the paradox is that this is precisely how they can force gambling site owners to stop being careless.

True, the poorly secure ones can be weeded out in this manner, but there is something called white-hat hacking for this purpose, where the hacker reveals to the owners/whisteblows the owners that the site is having some problems and need to be looked into. This can also be put under penetesting or bug bounty.

Most the correctly caught exploits get rewarded by the owners to such responsible hackers and no legal process comes in. But here they are stealing the money and hence punishment will follow once they get caught.

There can be so substitute for securing the devices when running such a casino, even then some or the other problems will arise.

[Outhue]

Hackers and scammers do terrible things, but the paradox is that this is precisely how they can force gambling site owners to stop being careless.

True, the poorly secure ones can be weeded out in this manner, but there is something called white-hat hacking for this purpose, where the hacker reveals to the owners/whisteblows the owners that the site is having some problems and need to be looked into. This can also be put under penetesting or bug bounty.

Most the correctly caught exploits get rewarded by the owners to such responsible hackers and no legal process comes in. But here they are stealing the money and hence punishment will follow once they get caught.

There can be so substitute for securing the devices when running such a casino, even then some or the other problems will arise.

I've discussed about this exact idea in the past, you can't start an online business without test running it, with massive bruteforce from the help of people who are good at jailbreaking platforms like whitehats, it's just a good way of knowing how strong your setup security wall is, also it's good to always upgrade security from time to time, I heard that sticking with one security measure on a website for too long is not a good idea, I think only Binance exchange is practicing this right now, they don't stand on a security update for too long so that hackers won't find a way through, casinos only need to do something similarly.

[Charles-Tim]

The truth is that you don't have to be too skeptical about that, just wait and see how the user funds are handled in the end. I am also monitoring the progress, if it ends badly I have no hesitation in removing this sig.

I visited Duelbits now and I noticed they are back online. I have forgotten my password on the site, I will login later. So I do not know if withdrawal has been enabled. But it is a good step that the site is back online. If nothing happened, just as I had posted before, it is not a surprised. I think a good gambling site has better probability not to shut down because it was hacked. I may later be wrong on another gambling site, but not on Duelbits.

[Jubilee58]

This news is actually very disheartening, and this is nothing but the handwork of scammers. When this kind of event happens, the gambling company looses huge amount of money, and might lead to partial or total shutdown of such gambling company. In this case some gamblers who have their fund in the duelbits might have their fund traped, and may likely not recover it except otherwise. Many companies including gambling companies have withdrawn their services from users, and their areas of operation because of the type of experience because it will result to lack of fund to service, and maintain the company properly. To those of us who are gamblers, and are using duelbits to gamble, is a pathetic situation, but is necessary you put yourself together, and furge ahead.
As a gambling platform, it is necessary to know, that your own safety remains the safety of those using your platform to gamble, and whenever your system is destabilized, the users are also feeling the same pains, so therefore the safety of a gambling platform is very paramount to increase users confidence using your platform to gamble.

[hosemary]

I visited Duelbits now and I noticed they are back online. I have forgotten my password on the site, I will login later. So I do not know if withdrawal has been enabled.

They made an announcement on X after coming back online and said that deposits and withdrawals are live again.
Cookdata already shared their X post in Duelbits' announcement thread, and you can check it below.

[Taskford]

Hackers and scammers do terrible things, but the paradox is that this is precisely how they can force gambling site owners to stop being careless.

True, the poorly secure ones can be weeded out in this manner, but there is something called white-hat hacking for this purpose, where the hacker reveals to the owners/whisteblows the owners that the site is having some problems and need to be looked into. This can also be put under penetesting or bug bounty.

Most the correctly caught exploits get rewarded by the owners to such responsible hackers and no legal process comes in. But here they are stealing the money and hence punishment will follow once they get caught.

There can be so substitute for securing the devices when running such a casino, even then some or the other problems will arise.

There's huge different between those matters and changes will start to occur once they successfully steal the money of their victims. Since if they take the money of the platform and claim to be a whitehat then ask for bounty. This can still fall as modern day robbery, what that people doing is obviously stealing money and use that stolen funds as ransom to get what they want.

Usual actions done by hackers is doing pen testing and reporting the bugs they have seen on the site or casino.

So if the casino really want real time protection, much better if they hire a real whitehat hackers to test their site security. Maybe with this they can avoid those hacking issue.

[Synchronice]

$7 million is a significant sum, but in reality, it's the price to pay for inadequate risk management related to hot cryptocurrency wallets. Now, scammers and hackers, armed with cheap artificial intelligence, will try to hack any platform that isn't sufficiently scrupulous about its security. It's a kind of natural selection by hackers and artificial intelligence. Hackers and scammers do terrible things, but the paradox is that this is precisely how they can force gambling site owners to stop being careless.

I don't think that cheap artificial intelligence can hack any platform and in general. Paid AIs have limits on cybersecurity hacks and even if you remove those limits, I think that they are quite limited to what you can do. To my mind, you need a bunch of very strong models to hack anything. Someone can run open source AI model on local computers but the moment you do it, others will probably taking counter-measurements to strengthen their security. Maybe simple businesses won't waste a time but companies like Duelbits should really be wasting their time on it.

By the way, ChatGPT is releasing GPT-6 Cyber model, that will help companies to strengthen the security of their own websites. AI clashes are becoming very interesting.

[Comeacross]

The first incident happened around some time in 2024 and over $4m was drained from their hot wallet.

I missed that they have also been exploited in the past. How much was it for the past one?

You probably missed the part I mentioned the amount. Anyway, I specifically bold the amount they lost during the first exploit.

If they have survived the past one, I think that they'll able to make it again for this one. Although it's a big amount that we're talking here and a huge part of it from their revenue, they shall recover again.

Of course, they can but that's not the point. They have refilled their wallet already as mentioned but the fact that they are capable of bouncing back doesn't mean they should be careless with their security management.

Really concerning and they have to do something about it and the management probably will be more curious and protective this time.

That's the usual slogan but in few years to come you'd probably hear something like this again but I hope this should be their last experience. Hacks like this cause a serious setback for business.

[Hatchy]

~snip

It's actually a good comeback for them. At least they didn't just pull the plug after the hack, but instead improved their security system. I think many other sites that have gone through these recent hacks should do the same. I never really doubted that Duelbits would leave the business because it is a casino I've known for a long time. They should be able to handle a loss like this, especially since losses are part of running a casino.. though this one was just unexpected. I hope everything runs smoothly for them going forward, and I hope this serves as a wake up call for other casinos to review their security systems, make sure everything is properly secured and updated, and prevent criminals from gaining access again.

[5W-KILO]

$7 million is a significant sum, but in reality, it's the price to pay for inadequate risk management related to hot cryptocurrency wallets. Now, scammers and hackers, armed with cheap artificial intelligence, will try to hack any platform that isn't sufficiently scrupulous about its security. It's a kind of natural selection by hackers and artificial intelligence. Hackers and scammers do terrible things, but the paradox is that this is precisely how they can force gambling site owners to stop being careless.

I don't think that cheap artificial intelligence can hack any platform and in general. Paid AIs have limits on cybersecurity hacks and even if you remove those limits, I think that they are quite limited to what you can do. To my mind, you need a bunch of very strong models to hack anything. Someone can run open source AI model on local computers but the moment you do it, others will probably taking counter-measurements to strengthen their security. Maybe simple businesses won't waste a time but companies like Duelbits should really be wasting their time on it.

By the way, ChatGPT is releasing GPT-6 Cyber model, that will help companies to strengthen the security of their own websites. AI clashes are becoming very interesting.

I've not seen a lot of almost perfect results from cheap AI, to even gather impressive data analysis you need to get a better AI and most of the time they are for hire, you will need to pay for subscription services to get access to such powerful AI.

What we might never be able to find out is if this hacks are been possible because someone was making it easier from the inside to those hackers on the outside, what if this is the case?

I am having the same feelings with the other attacks that has happened on other platforms and exchanges, it's easier to point finger to north Korea but what if it's done by someone that's part of the company.

[lovesmayfamilis]

$7 million is a significant sum, but in reality, it's the price to pay for inadequate risk management related to hot cryptocurrency wallets. Now, scammers and hackers, armed with cheap artificial intelligence, will try to hack any platform that isn't sufficiently scrupulous about its security. It's a kind of natural selection by hackers and artificial intelligence. Hackers and scammers do terrible things, but the paradox is that this is precisely how they can force gambling site owners to stop being careless.

When we were kids, we watched movies about robot wars and played consoles as robots fought each other, but now it looks like our past and the science fiction is becoming reality. While one AI is being used by hackers to breach casinos, another is being developed to bolster security. There were many stories about how AI made decisions for users and acted beyond the user's instructions. Now, after hacking these two casinos, there will be attempts to hack others, and we will witness who is strong in developing security protocols and who is not. Hackers have a new "ally," and now the owners will have to set up their systems so that their machine wins this "battle of bots."

[m2017]

$7 million is a significant sum, but in reality, it's the price to pay for inadequate risk management related to hot cryptocurrency wallets. Now, scammers and hackers, armed with cheap artificial intelligence, will try to hack any platform that isn't sufficiently scrupulous about its security. It's a kind of natural selection by hackers and artificial intelligence. Hackers and scammers do terrible things, but the paradox is that this is precisely how they can force gambling site owners to stop being careless.

When we were kids, we watched movies about robot wars and played consoles as robots fought each other, but now it looks like our past and the science fiction is becoming reality. While one AI is being used by hackers to breach casinos, another is being developed to bolster security. There were many stories about how AI made decisions for users and acted beyond the user's instructions. Now, after hacking these two casinos, there will be attempts to hack others, and we will witness who is strong in developing security protocols and who is not. Hackers have a new "ally," and now the owners will have to set up their systems so that their machine wins this "battle of bots."

Yeah, has the "world of the future" arrived a bit too soon? While the conflict used to be a battle of human wits (between the system's attacker and its defender) we have truly entered an era of "robot warfare". Or perhaps an "AI arms race".

You are undoubtedly right that attacks on other casinos are just a matter of time. AI is here to stay, and every hacker will be using this tool.

Is this natural selection? Or is it, in fact, Artificial (I)? After all, the "barrier to entry" for new casinos is about to get much higher. Launching a casino will require entirely different levels of funding. If "weak" casinos "die out," won't that lead to the gambling industry being monopolized by a handful of casinos capable of financing their own security protocols?


By the way, has Duelbits announced a completion time for the testing yet? The team is once again delaying the launch of duelbits 2.0. Of course, it is better to be certain and double-check all systems, but gamblers are surely eager to access their accounts. If you (as a hypothetical customer) have an account with a balance at duelbits casino, what will you do once the status changes to "online"? Will you continue enjoying the gameplay as before, or will you quickly withdraw your funds from this casino?

[L E G E N D A R Y]

Whether it is a promise or not, the most important thing is that the user's funds are safe and can be used again. Gambling sites affected by the hack are not the only ones experienced by Duelbits, as said by Charles-Tim above there are Stake, Metawin, and Razed.

In fact, two out of the three names of the gambling sites are still actively promoting on this forum, which means that the gambling site builds trust continuously until its users return.

The truth is that you don't have to be too skeptical about that, just wait and see how the user funds are handled in the end. I am also monitoring the progress, if it ends badly I have no hesitation in removing this sig.

I get what you’re saying, and another real question should be how Duelbits also handles the affected funds as well as how they communicate with users throughout the process. It’s true that trust can indeed be return overtime, when in situations like this when a platform experiences a serious security breach, it’s normal for users to expect the highest level of transparency, even for the most reputable platforms, they’ll need to show transparency and seriousness before that trust can actually return. It’s true that it’s normal for any platform to experience a hack, and we all know that this same hack has also made several platforms go bankrupt and out of business, which is why users would require to see how serious the platform is about tackling the whole issue. Well just like you said, the only reasonable thing to do at a time like this would be to sit back and watch how the whole thing unfolds and not to jump into any conclusions.

[Perfectbaby]

I came across this news as well and it was shocking to me because other casino also experienced this same thing. Metawin and stake.com were also targeted as well. But the CEO actually tried to restore back their system so quickly and he also changed users deposit address.
That is to say that anyone who is making deposit must have to use the new address generated from them. I do not really know why most casinos are being targeted and, they should also try as much to strengthen their security system.

[Charles-Tim]

I get what you’re saying, and another real question should be how Duelbits also handles the affected funds as well as how they communicate with users throughout the process. It’s true that trust can indeed be return overtime, when in situations like this when a platform experiences a serious security breach, it’s normal for users to expect the highest level of transparency, even for the most reputable platforms, they’ll need to show transparency and seriousness before that trust can actually return.

What kind of trust are you referring to? A gambling site that hackers stole $7 million, went on maintenance for like like 2 days and resume operation today with deposits and withdrawals enabled. What kind of trust is still needed?

It’s true that it’s normal for any platform to experience a hack, and we all know that this same hack has also made several platforms go bankrupt and out of business, which is why users would require to see how serious the platform is about tackling the whole issue. Well just like you said, the only reasonable thing to do at a time like this would be to sit back and watch how the whole thing unfolds and not to jump into any conclusions.

Duelbits is back online as many people expected. We have posted about this.

[Hewlet]

~snip

It's actually a good comeback for them. At least they didn't just pull the plug after the hack, but instead improved their security system. I think many other sites that have gone through these recent hacks should do the same.

It is a big hit on them and coming back is a big step for them though once they are able to go pass this phase and things goes back to normal, people will still make use of their platform. there will certainly be people that will not trust them any longer and some will have to wait much longer to decide if they are worth dealing with. at the end, it is how well they are able to deal wit this faulty reputation bridge that matters most.

[sompitonov]

I came across this news as well and it was shocking to me because other casino also experienced this same thing. Metawin and stake.com were also targeted as well. But the CEO actually tried to restore back their system so quickly and he also changed users deposit address.
That is to say that anyone who is making deposit must have to use the new address generated from them. I do not really know why most casinos are being targeted and, they should also try as much to strengthen their security system.

I believe fraudsters are constantly seeking new ways to hack into systems where money is involved and casinos are prime targets. After all, if they manage to breach a site's defenses, they can quickly attempt to steal funds from customer accounts or the casino's own reserves. Naturally, the security team needs to detect such activity immediately the foundation of cybersecurity lies not only in robust protection but also in the speed at which breaches are identified for instance, if wallet balances suddenly start dropping. Of course, it is crucial for businesses in this sector to continuously upgrade their security measures, given that fraudsters are always devising new methods of attack.

[Asiska02]

It is a big hit on them and coming back is a big step for them though once they are able to go pass this phase and things goes back to normal, people will still make use of their platform. there will certainly be people that will not trust them any longer and some will have to wait much longer to decide if they are worth dealing with. at the end, it is how well they are able to deal wit this faulty reputation bridge that matters most.

Coming back online and resuming all gambling activities is already a big trust and no further trust needed by users to want to see before they get their accounts active and use the casino again. This is the kind of trust many users want to see from casinos they’re using, their funds should be safe always. At a time like this, they should give priority to users funds which is actually what they did. Not all casinos will face this big hack and resume operations already. To me this is an already a +1 trust from them.

[Orpichukwu]

It’s good to see DuelBit get back again, which is what I was expecting from them. $7m is not small money; some casinos should have shut down and filed for bankruptcy, but they took their time and reimbursed stronger.

By the way, ChatGPT is releasing GPT-6 Cyber model, that will help companies to strengthen the security of their own websites. AI clashes are becoming very interesting.

AI vs AI: the development is always for the good of the people, but bad actors always look for how to use those developed tools to their own advantage. Companies should just increase the number of security experts who will actively be monitoring their system to detect and prevent exploits.