Gamdom hacked for a 3M$

[Pandorak]

This is starting to seem like a regular thing now, after what happened with duelbits I thought it would be a wake up call for other casinos to put more effort into making sure that they have a tight security. The scammers or hackers are moving really fast now, it seems like they have insiders in these casinos giving them informations about the loopholes of perhaps they now have a means of spotting this. Both duelbits and gamdom are back online and that's good to know but it's not just about coming back online they have to fix these loopholes.

That’s exactly right. This should indeed serve as an emergency signal or a serious warning for every casino to always check its security, so there are no vulnerabilities that hackers, who only want to steal money from them, can exploit. Because once that happens, the biggest impact isn’t the lost funds, but the players trust, they’ll be more afraid to keep their money there for long. And while this is certainly bad news, it’s reassuring that the casino has finally resolved the issue and is back online. Hopefully, they’ve thoroughly patched the vulnerability so that hackers can’t exploit it again in the future.

[suzanne5223]

Honestly, 2026 is a year of major lessons for crypto brands, wallets, exchanges, and more.
I hope we could know how the attacker was able to execute the action.
It is nice that Gamdom noticed the issue early and managed to stop the further drain by the hacker before it got worse.
Still, losing the sum of $3M will hurt, but it’s better than a total wipeout of the gambling platform's hot wallet.

I would say that with the trend happening this year 2026 (which I'm afraid might continue since 2026 still has over 2 months left), could it be possible that it's also related to the increasing popularity of AI, or is it just a coincidence? This hack could potentially have been AI-assisted to some extent.

You have a point because it seems like the attacker purposely made this year their main focus before the total bullish market started.

I dont know if the hot wallet attack has something to do with the use of AI, but it's definitely making things easier for attackers, and we shouldn’t put all the blame on AI due to how some attackers are using it to find and exploit flaws.

Another thing i notice is that most of these casino hot wallet hacks still come down to the same old weaknesses and strategies, like compromised automation servers or weak internal access controls.

[Orpichukwu]

For years, we haven’t seen hacks like this in Web3 casinos.
I’m not sure why hackers have started targeting them perhaps it’s because their revenues have grown so significantly.
It started with Duelbits, and now it’s Gandom it makes you wonder which casino will be next. While a $3 million loss is substantial, it could have been much worse fortunately, they caught it early.

Duelbit is not the first, but it was the most recent one before this. We have history with Metawin, Stake and a few other casinos which were also hacked, but they are back to business like nothing ever happened. The revenue and money they leave visible in their hot wallet is what always attracts these hackers to them.

[freedomgo]

For years, we haven’t seen hacks like this in Web3 casinos.
I’m not sure why hackers have started targeting them perhaps it’s because their revenues have grown so significantly.
It started with Duelbits, and now it’s Gandom it makes you wonder which casino will be next. While a $3 million loss is substantial, it could have been much worse fortunately, they caught it early.

Duelbit is not the first, but it was the most recent one before this. We have history with Metawin, Stake and a few other casinos which were also hacked, but they are back to business like nothing ever happened. The revenue and money they leave visible in their hot wallet is what always attracts these hackers to them.

Don't forget about Razed Casino - May 2026 Cyberattack.

Though they did not disclose how much they lost, you should include them in the list.
And as per the records, it took them 6 days before they were back online again.

[Iranus]

But it is good to know that Gandom is back online, so as the gambling sites have been hacked, they are all coming back online and not gone bankrupt.

For major casino, house edge and daily volume are so high that covering $3M loss is no big deal.
For instance Duelbits remain firmly established in market despite losing $7M last month.
However real challenge isn't financial loss you kniow.
it’s the impact on reputation.

The fact that they are covering these losses out of their own pocket, while keeping user fund safe, is positive step for building trust. But if major casino frequently fall victim to hot wallet breach then both regulator and user will eventually lose patience. These casino need to increase their security budget, imo.

[Julien_Olynpic]

I believe this Gandom casino hack was also carried out using AI. In 2026, we'll see a sharp rise in AI-assisted hacks of exchanges, DeFi protocols, bridges, and even casinos. On the one hand, this is a dangerous trend. On the other, AI only exploits the bugs left behind by the team itself. Thus, projects that neglected to detect bugs in their software or engaged in reckless practices when handling their crypto assets are driven out of the market.

[bangjoe]

I believe this Gandom casino hack was also carried out using AI. In 2026, we'll see a sharp rise in AI-assisted hacks of exchanges, DeFi protocols, bridges, and even casinos. On the one hand, this is a dangerous trend. On the other, AI only exploits the bugs left behind by the team itself. Thus, projects that neglected to detect bugs in their software or engaged in reckless practices when handling their crypto assets are driven out of the market.

Nowadays when a casino owner only relies on humans in its maintenance then it is quite risky in the midst of developing AI agents that are getting better when often trained, humans still have human errors where mistakes can be missed, exploitators using AI that is much better will certainly be easy for them to find bugs or errors left by humans, it is very important for the developers of a system to have the ability to use AI to improve the quality of security on their projects.

I am sorry for the hacking at this casino, although I have never played there, but this will be a lesson for developers and players that this increasingly sophisticated technology cannot be avoided, we must master it as best we can to protect against potentially harmful mistakes, and those who ignore this progress will surely die.

[Antotena]

And that is the scary part, I wouldn't say that this is the norm, as usually hackers attack exchanges or individuals. But right now, it looks like they shift to online casinos as they are more likely loopholes as they could feel safe from hackers as they are not the target.

But they are in the move right now so it's better for crypto base casinos to really make sure that their security is air-gapped and they should also teach their employees not to get phished as well as this could be one of the attacks that his criminals might do, social engineering.

I think we are not looking at something, if you pay attention to how these attacks has been going on ever since Bybit attack, the exploit are targeted at hot wallet from exchangesand casinos, that means there is a particular thing in hot wallet exchanges they all used that these hackers are using to steal money from them. This can't be coincidence, they all must be using the same tech for withdrawals that is why these people are able to have access to their wallet.

What I don't understand now is if the exchanges and casinos are taking any measures. If I'm into a business and my competitor got attack, the best you can do is to reach out and ask exactly what went wrong so as to take precaution. They sat their and didn't do anything only to lose 7 figures for nothing. If this is not insider, my hypothesis is right.

[SamReomo]

According to a post on X, Gamdom noticed a hack targeting their hot wallet system and took action to stop the leak; in total, they lost just over $3 million due to the hack and moved the remaining funds from their hot wallets to cold wallets.

These days hackers are using AI LLMs to hack any website as it is now much easier for them to find bugs with the help of AI agents. Such hackers often use uncensored models to perform such hacks and if someone manages to break state of the art models like Claude Opus 5.5 or Fable 5.1 or GPT 6 Astra then they can misuse such top level AI models to find bugs and vulnerabilities even in secure sites. The AI can do more harm than good especially if wrong people understand using it for wrong purposes. I think casinos and exchanges should be alert as misuse of AI models can bring huge harm.

[SatsPH]

And that is the scary part, I wouldn't say that this is the norm, as usually hackers attack exchanges or individuals. But right now, it looks like they shift to online casinos as they are more likely loopholes as they could feel safe from hackers as they are not the target.

But they are in the move right now so it's better for crypto base casinos to really make sure that their security is air-gapped and they should also teach their employees not to get phished as well as this could be one of the attacks that his criminals might do, social engineering.

I think we are not looking at something, if you pay attention to how these attacks has been going on ever since Bybit attack, the exploit are targeted at hot wallet from exchangesand casinos, that means there is a particular thing in hot wallet exchanges they all used that these hackers are using to steal money from them. This can't be coincidence, they all must be using the same tech for withdrawals that is why these people are able to have access to their wallet.

And going back to the Bybit hack of 2025, the hackers were clever enough, instead of hacking it directly, what they did is to attack Safe{Wallet}, a widely used multi-signature wallet solution that required multiple approvals. In case of Bybit, there were 3 signers.

But the signers where not aware that the web service has been attack already. So when it came down for them to sign, they didn't hesitate to do the transfer from one wallet to another. So that's a really a sophisticated attack. Yes, it's not coincidence as hackers are really looking for every loophole that they can exploit.

[5W-KILO]

Honestly, 2026 is a year of major lessons for crypto brands, wallets, exchanges, and more.
I hope we could know how the attacker was able to execute the action.
It is nice that Gamdom noticed the issue early and managed to stop the further drain by the hacker before it got worse.
Still, losing the sum of $3M will hurt, but it’s better than a total wipeout of the gambling platform's hot wallet.

I would say that with the trend happening this year 2026 (which I'm afraid might continue since 2026 still has over 2 months left), could it be possible that it's also related to the increasing popularity of AI, or is it just a coincidence? This hack could potentially have been AI-assisted to some extent.

You have a point because it seems like the attacker purposely made this year their main focus before the total bullish market started.

I dont know if the hot wallet attack has something to do with the use of AI, but it's definitely making things easier for attackers, and we shouldn’t put all the blame on AI due to how some attackers are using it to find and exploit flaws.

Another thing i notice is that most of these casino hot wallet hacks still come down to the same old weaknesses and strategies, like compromised automation servers or weak internal access controls.

Things would have slow down or look the same as the past years when it comes to breached and hacking, but then AI came and it took a day or two to hack compare to normal weeks and months before a vulnerability is found.

All the faults go to the availability of AI, and also AI been too accessible by the public, at the same time it's been helpful because some people are using AI for good things.

The only reason why I don't feel completely bad about AI is because vulnerability can be detected faster, every platforms who always feels like they have the best security will now have to spend twice as harder on their security than before.

[mikel_012]

Gamdom is back and they are using the hack to at least make the gamblers play more. If life gives you lemons, make a lemonade.

Gamdom is BACK Online‼️

We’re sorry for any inconveniences the recent downtime may have caused. We want to thank all of our loyal users for your support during this time.

As compensation for the downtime we are offering all players:

- $45k Daily Leaderboard
- Reload Restart
- 20% Deposit Bonus (Existing Users)
• $45k Daily KOTH This Week

We are also giving away $50k today. To enter: Repost, Like & Comment ($5k to 10 players) 💰

Source: https://x.com/gamdom/status/2110892066041696711

And also they paid 2x every bets placed on originals when in maintenance:

All bets that were placed on Gamdom originals while we were under maintenance have been paid out 2x.

In addition, all deposits that were made during the maintenance period have also been credited.

If any players have concerns, please reach out to to our customer support team.

Glad to see it will not affect the casino

[Grace333]

Duelbit is not the first, but it was the most recent one before this. We have history with Metawin, Stake and a few other casinos which were also hacked, but they are back to business like nothing ever happened. The revenue and money they leave visible in their hot wallet is what always attracts these hackers to them.

I had to do a little research about this before making a comment, both metawin and stake were confirmed to have gone through the same thing and for stake it's even worse than all the casinos combined because according to my research over $40 million was stolen in 2023, I wonder how they were able to bounce back after that loss they incurred, that's quite a lot of money. As for metawin about $3 to $4 million dollars was stolen which isn't much compared to the amount of money that stake lost to the hack. In as much as these casinos still leave their revenue visible in their hot wallet they don't really keep all their reserves in their hot wallet for security purposes.

[Nwada001]

Those 3 days of no operations mean another huge loss in potential revenue, because based on the report I saw, they were making an estimated gross gaming revenue of $7 million per month... so that is more or less $230k+ per day, and that data is even from 2025, so it's possible that it has already increased by now.

So for 3 days of no operations, that is almost $700k in unrealized revenue.

They took a lot more time to restart than I expected. Maybe they actually have to check back everything over and over again. It's better they take their time to lose that profit than to leave some loophole out of a rush that will also be exploited soon, and those profits will be tried to be lost again to scammers. It will take them time to recover and get back to that their daily volume.

[Jaycoinz]

Wow. another day, another hack.
3M$ seems like a small amount. I would say that they are very lucky. Duelbits got hacked and lost about 7M$ in September. It seems the hack is going round.
These crypto casinos should not say, it can't be me, and just do nothing. They better stress-test their system before it gets to them.
On the other hand, what I like about user funds is that the casinos always find a way to pay back those who was affected if any to keep their reputation.
Anyways, looking forward to their official statement.

3 million dollars isn't actually a small amount of money but you could say that it is small based on the type of casino gamdom is, for some casinos losing that amount of money might wreck them totally. Getting back online doesn't mean that they weren't affected, that's actually a major loss. But like you said, this can happen to.any casino at this point, what they have to do now is to find ways to make sure their systems are secure, that's very important now.

[Webutxo]

I had to do a little research about this before making a comment, both metawin and stake were confirmed to have gone through the same thing and for stake it's even worse than all the casinos combined because according to my research over $40 million was stolen in 2023, I wonder how they were able to bounce back after that loss they incurred, that's quite a lot of money. As for metawin about $3 to $4 million dollars was stolen which isn't much compared to the amount of money that stake lost to the hack. In as much as these casinos still leave their revenue visible in their hot wallet they don't really keep all their reserves in their hot wallet for security purposes.

Actually, if you look at ranking of casino, I don't think there is any casino right now that is as big as stake by volume and revenue even though we can't verify some of those information, thier data proves that they are one of the biggest in the system that's why the amount stolen by the hackers is more than the total stolen from other casinos and till date, no part of that money has been able to recovered. Those that mean that hacking crypto money can't be trace.

It's now like every month, it's a hack to another. Last month, an exchange Bitget and Duelbit were hack and now Gandom. To my surprise I don't know that Gandom is this big, there announcement channel is not that active as other casino on this forum. I just hope they are able to bounce back and continue the business as usual, but this will cause a set back of at least a year before they balance.

[Floxynice]

Wow. another day, another hack.
3M$ seems like a small amount. I would say that they are very lucky. Duelbits got hacked and lost about 7M$ in September. It seems the hack is going round.
These crypto casinos should not say, it can't be me, and just do nothing. They better stress-test their system before it gets to them.
On the other hand, what I like about user funds is that the casinos always find a way to pay back those who was affected if any to keep their reputation.
Anyways, looking forward to their official statement.

3 million dollars isn't actually a small amount of money but you could say that it is small based on the type of casino gamdom is, for some casinos losing that amount of money might wreck them totally. Getting back online doesn't mean that they weren't affected, that's actually a major loss. But like you said, this can happen to.any casino at this point, what they have to do now is to find ways to make sure their systems are secure, that's very important now.

No matter the amount involved, once lost this way, the owner will be affected. If it doesn't affect the business, it may personally affect the owner's emotions.

To me, I am not focused on the amount that was lost; I am focused on the fear and threat that the hack poses to the business. Even though they are still in operation, people will be skeptical about using the business. It has happened to Duelbits before, and it has happened to them again. Don't you think Gamdom may be facing the same concerns? I believe that their users also think this way too.

Forever, the story will remain that Gamdom was once hacked and money was lost.

[ColdLava40]

Lucky they were able to stop it on time and move their remaining balance to their cold storage. I hope they can come back online as soon as possible, like they said, and update on their X official page.

Which casino is going to be next? Or should the casino now leave the minimum amount on their hot wallet and be handling withdrawals manually in order to stay safe from these hackers? But that’s going to be boring and slow for players.

We!k $3M is really a large amount especially for most upcoming casino.

We no longer know who they will target next Because it just keeps happening. From casino to exchanges from exchanges back to casino. It's more like a trending pattern these days.

Shouldn't there be a better way for these sites to secure their funds? How about having their funds locked up on some cold storage instead and only leave a small amount connected to their hot wallets?.

With how things are going these hacks will be persistent and the only way to prevent it is for those online services to incorporate a better wallet system.

[Makus]

I think we should wait for the official announcement before concluding that the gambling site has been hacked. What was seen from Gandom was unauthorized connection on one of their automation servers.

It was said that users funds are safe, but which we can not believe for now because of the transfer of such amount of money. So we can not believe the gambling site wallet has not been hacked until an official statement that says otherwise.

Edit:
If Felix Römer is the founder of Gandom, the $3 million hack is true according to his post on X.

$3 million is the amount the founder gave but some sources say that it was slightly higher than that, I have reasons to believe that he only put it at the figure so players wouldn't fee like the casino is going bankrupt or something. You are right about not believing that the players funds are safe just because they said so, it is possible for them to be going through a serious set back at the moment but trying to keep it cool so that players won't lose hope in the casino. They are currently back online but we still await further informations.

[Mayor of ogba]

It seems all these hackers are well prepared for centralized exchanges and casinos this year, mid last month Bitget exchange and Duelbits casino was hacked, and now it's the turn of Gamdom casino to be hit by hackers. I'm so happy Gamdom management were able to notice unauthorization to their hot wallet and prevent the hackers from moving more than $3 million, this show that they are working 24/7. Now they should figure out where they have flaws in their security and fix it so that hackers won't identify weakness in their security in the future.