Gamdom hacked for a 3M$

[Issa56]

This year didn't end with the Duelbits hack only, another online casino was hacked:
According to a post on X, Gamdom noticed a hack targeting their hot wallet system and took action to stop the leak; in total, they lost just over $3 million due to the hack and moved the remaining funds from their hot wallets to cold wallets.

It’s high time gambling sites takes their security measures serious. Last month duelbits was hacked, and a gambling sites which I can’t remember its name, another gambling sites have been hacked today. It’s so sad to see all this hack happening, hackers are just targeting gambling sites right now, because they are finding it easy to hack into their system and take away anything they want. Why should they leave that amount of money in their hot wallet.

[Crypto Library]

This year didn't end with the Duelbits hack only, another online casino was hacked:
According to a post on X, Gamdom noticed a hack targeting their hot wallet system and took action to stop the leak; in total, they lost just over $3 million due to the hack and moved the remaining funds from their hot wallets to cold wallets.
These guys had a

Yeap, I remember them very well because they were my first signature campaign in this forum when I was in member ranked.
Anyway that off topic but I wonder how much assets did gamdom casino keep in their hot wallet and will they be able to overcome this obstacle in the end?

I hope they can recover from this situation and resume their operations as well as users should get their deposited money back and this casino should not be like Bitsler., I don't think it will be too difficult for them because last week they were ranked 5th among the top crypto based casinos with 62.55 million deposits which is an 11.7% increase compared to the previous week.

[OgNasty]

This is horrible news and as much as I hate to say it, smells of an inside job. They just teamed up with Stevewilldoit to advertise this casino to a huge audience with rewards for deposits. That was just a matter of weeks ago. I hope Steve doesn’t get stung too much from this and the casino is able to recover funds.

[aioc]

It’s so sad to see all this hack happening, hackers are just targeting gambling sites right now, because they are finding it easy to hack into their system and take away anything they want. Why should they leave that amount of money in their hot wallet.

Hackers go where the money is, and once they find a loophole, they will target it. We seldom read news of casino hacking. Years ago, we usually read personal wallets and exchanges, but now they have included casinos in their target. Recent casino hacks were not small casinos, Duelbits and Stake are industry giants.
When top names in your industry were the victims, it's time to take their security seriously. This recent Gandom hacking is not going to be the latest one, hackers are actively working on some of them, and some of them are using AI now to find loopholes.

[Nothingtodo]

The end of 2026 is considered a sad time for Bitcoin hardware wallets and casino and gambling sites. A few days ago, the Bitcoin hardware wallet Coldcard was hacked and soon after, two popular casino and gambling sites Duelbit, Bitsler were hacked. However, while one of them continued their normal operations, the other decided to close. And today, another bad announcement that Gamdom was hacked and about three million dollars were stolen. All this bad news has been reducing the interest of gamblers and investors for so long and it can have a negative impact on the crypto currency and casino world.

[Agathamay]

Considering how long the casino have been in business, I don't think the $3m hack would send them out of market  and at some point, I think the players are also those making things difficult for casinos and the moment a casino doesn't meet up your personal expectations, we start labeling it wrongly forgetting that, these casinos also have to follow some rules from the agencies that licensed the platforms and I believe if we the players can in some cases try to take things easy with these casinos, maybe things might just be easier and better for both the players and the casinos

[Odogwu-Blockchain]

What are those hackathon bounty program actually doing? I thought big ventures do launch a bounty program with hackers to try to hack their system or find fault and vulnerable spot on their platform and then get paid for doing that.

Are they lying about these bounty programs, why are we having series of hacks in the industry?

[Alphakilo]

I have read so much hack stories just between last month and this month both on cold wallets and gambling platforms that this one is like a normal occurrence that is expected to happen since the platform didn't do so much as to ever think such could happen and kept using centralized systems, instead of opting for a multi-sig setup that could have prevented this hot wallet compromise in the easiest way possible.
This is why self custody principles matters both to the gambler, the investor and the platform that uses cryptocurrency, because the threat of hack is ever present.

[Natalim]

Wow. another day, another hack.
3M$ seems like a small amount. I would say that they are very lucky. Duelbits got hacked and lost about 7M$ in September. It seems the hack is going round.
These crypto casinos should not say, it can't be me, and just do nothing. They better stress-test their system before it gets to them.
On the other hand, what I like about user funds is that the casinos always find a way to pay back those who was affected if any to keep their reputation.
Anyways, looking forward to their official statement.

I assumed this may not be the last casino on the line, hackers have 2 months left before year ends so for sure they will have better plans for the next weeks and months ahead. Casinos should be more cautious this time, and do everything to keep their system highly protected from all these hacking attempts. $3m might be small compared to Duelbits but its still  a loss, and if this continues, this will be a threat to gamblers and lose their interest on these reputable casinos. Still waiting for their official statement as well.

[EluguHcman]

To use the site is also going to be a second thought for those users and publics who have heard about the hacking incident even though the users funds where not affected, the news that the casino platform had been hacked will definitely fume wrong motive to the affected casinos.

I feel a lot for the duelbit occurrence because the hack they experienced had also been one way and the other brought marketing challenges to them that even though users funds are intact as that of this Gamdom crypto casino being experienced hacked, there is definitely going to be demarketing in the platform.

Indeed the internet ia really terrifying that is why we also have to consider back up security such as the offline storage system which keeps users keys offline that makes it difficult for hackers to invade.

[CryptoBuds]

Those who play on this site know that VIP Spin feature has been unavailable for quite some time. Their Free Spin are also no longer available. Following the conclusion of the Signature Campaign, value of their Weekly and Monthly bonus also saw significant decline. For these reasons, I withdrew all my funds from this casino. However, I never expected something like this to happen.

In reality, there isn't much appreciation shown toward loyal player here. To be honest, I really miss the old Gamdom experience. I hope they recover quickly. At least, that they don't turn into any exit scam.

[Dogedegen]

Maybe 3 million isn't a large amount for them

I have to admit I've never used Gamdom, even though they've already run a campaign here on the forum
Forget about manual withdrawals, I don't think any company these days should operate that way, or they'll lose users easily

What I found here was on this website: https://betrefs.gg/reviews/gamdom

240.5 million in deposits over 30 days
236.8 million in withdrawals

If they are practicing good security and are reasonable, to have this amount of money in a hot wallet should indicate that it does not present a significant percent of their total holdings. If it does, then they were running the management of the funds and the wallets the wrong way. Anyway a swift recovery and proper patching of what went wrong should help them get back and start earning back that money. I don't think it takes very popular casinos that much time to earn back a few million even if we don't have good data to verify, we can make estimations from the outside.

I think we should wait for the official announcement before concluding that the gambling site has been hacked. What was seen from Gandom was unauthorized connection on one of their automation servers.

Is this not confirmed enough? a statement from their founder

Long story short, we noticed a breach attacking our hot wallet system & we took measures to stop the drain, in total we lost just over $3m to the breach and secured other hot wallet funds to our cold wallets

https://x.com/Romer/status/2110411281350230457

I do not like this practice in our field, we should get as many details as soon as possible so that others can learn from this. We just had a Ledger hack and they tried to minimize the issue or delay communicating as much as possible, and many other hacks before that happened on smaller services and they try to keep the details away from the public. I know it is hard to sometimes admit what went wrong, even more when it is something very basic like having some weak password somewhere but it is important for the industry because they can learn from these incidents so we can have less hacks together.

[Orpichukwu]

What are those hackathon bounty program actually doing? I thought big ventures do launch a bounty program with hackers to try to hack their system or find fault and vulnerable spot on their platform and then get paid for doing that.

Are they lying about these bounty programs, why are we having series of hacks in the industry?

I don’t know if it was this year or last year when a care about a platform refusing to pay a security bounty to someone who detected and reported it. If that actually happened, it could be discouraging for security experts to spend time testing what they won’t get paid for.

Or the offer is not really that high enough for someone with high security experience to spend his time on; we really can’t tell, and the way hacking is very common this period, maybe hackers just have their hand on more tools that can detect vulnerabilities than anyone else.

[BALIK]

$3 million loss is no minor issue, man!

Such major incident in hot wallet point to serious vulnerability in system’s backend and tracking mechanism. While they did act quickly to plug leak, these fundamental gap in risk management will make it difficult to regain user trust. Let’s see what kind of report their team provide after they overhaul their security!

Which casino is going to be next? Or should the casino now leave the minimum amount on their hot wallet and be handling withdrawals manually in order to stay safe from these hackers? But that’s going to be boring and slow for players.

TBH, manual processing won't be able to stop hacking entirely.

In fact, I believe it could introduce new risk, such as insider threat or potential compromise of admin account.

Therefore in my view manual withdrawal are not the solution. Instead, it would be better to implement automated caps for hot wallet and strengthen AI based anomaly detection algorithm.

This would ensure that any unusual, large scale transaction are automatically paused.

[Hispo]

This is horrible news and as much as I hate to say it, smells of an inside job. They just teamed up with Stevewilldoit to advertise this casino to a huge audience with rewards for deposits. That was just a matter of weeks ago. I hope Steve doesn’t get stung too much from this and the casino is able to recover funds.

In my opinion this was not an inside job, but rather the doing of the usual suspects: North Korean hackers or Russian hackers.
Lately they have been actively targeting casinos and other gambling services which rely on their hot wallets in order to fulfill theirs clients/gamblers withdrawals.

Anyways, whatever the case we can expect this attack gives the heads-up to the rest of the gambling ecosystem, so they can do whatever it takes, so they won't become the next victims of any attack like this one.

Three million dollars is not pocket change, does not matter how big the casino is...

[free-bit.co.in]

In my opinion, this hacker activity is linked to the emergence of new, sophisticated AI models that can be used to find vulnerabilities in online platform systems.

That’s very logical point.

These days, hacker use automated security bot and advanced AI model to scan for loophole in smart contract and transaction automation server around clock.

However casino developer should also be utilizing AI asset of similar caliber for red teaming purpose.

Even though Gamdom suffered $3 million loss but way they managed to quickly halt the drain and move fund to cold storage is commendable.

But in my opinion, it is no longer possible to survive without conducting periodic third party security audit and penetration testing on smart contract and automation server.

[Hispo]

In my opinion, this hacker activity is linked to the emergence of new, sophisticated AI models that can be used to find vulnerabilities in online platform systems.

That’s very logical point.

These days, hacker use automated security bot and advanced AI model to scan for loophole in smart contract and transaction automation server around clock.

However casino developer should also be utilizing AI asset of similar caliber for red teaming purpose.

Even though Gamdom suffered $3 million loss but way they managed to quickly halt the drain and move fund to cold storage is commendable.

But in my opinion, it is no longer possible to survive without conducting periodic third party security audit and penetration testing on smart contract and automation server.

I think casinos, exchanges and banks already are using Artificial intelligence in order to test the security of their systems , it would be foolish if they did not do it.

The good news is how legitimate users and business have access to the same weapons those hackers and scammers have at their disposal, so eventually we will reach a state of equilibrium in which scammers and hackers wont be able to find any more vulnerabilities in the future thanks to AI, since those same vulnerabilities would have been patched by developers, thanks to the very same help of AI models, specially Claude, which seems to be specially effective when comes to coding and finding bugs.

[Darker45]

This year didn't end with the Duelbits hack only, another online casino was hacked:
According to a post on X, Gamdom noticed a hack targeting their hot wallet system and took action to stop the leak; in total, they lost just over $3 million due to the hack and moved the remaining funds from their hot wallets to cold wallets.

The year is still far from its end. There are still 2 and a half months left before 2026 finally closes. And with how easier it seems to have become for hackers to scan vulnerabilities and loopholes in casino systems with the help of new technologies, there could still be more.

It seems casinos are now the low-hanging fruits for these criminals. Most exchanges must have a lot more solid security. They're for advanced thieves. For the less advanced ones, relatively smaller casinos might be better targets.

This is another warning call for them to keep up. Hackers are catching up fast.

[mikel_012]

What are those hackathon bounty program actually doing? I thought big ventures do launch a bounty program with hackers to try to hack their system or find fault and vulnerable spot on their platform and then get paid for doing that.

Are they lying about these bounty programs, why are we having series of hacks in the industry?

There is no bug bounty that pays $3M or even close

White hackers prefer $100k clean rather than $1m or more dirty. But not everyone thinks like this

If a hacker that does not care about honesty and can earn $3M with an exploit, he will take this route instead of receiving a small amount of $10k which is all many websites offer for high severity bugs

Unfortunately that is how the hacking world works

[LogitechMouse]

---

The year is still far from its end. There are still 2 and a half months left before 2026 finally closes. And with how easier it seems to have become for hackers to scan vulnerabilities and loopholes in casino systems with the help of new technologies, there could still be more.

It seems casinos are now the low-hanging fruits for these criminals. Most exchanges must have a lot more solid security. They're for advanced thieves. For the less advanced ones, relatively smaller casinos might be better targets.

This is another warning call for them to keep up. Hackers are catching up fast.

First it's those DeFi platforms.
Then it's those centralized exchanges.
Now it's the online casinos.

Nobody's safe especially now that the hackers are becoming better and better, the security of ALL of the platforms must become better as well. I don't think that the year will end with only 2 casinos getting hacked. I have this gut feeling that we might see more. I will not specify which ones, but I have some in my mind already. We can't also forget that AI is becoming better and better now, and we can't deny the fact that these hackers are using AI to do these kind of things in a more efficient and better way.

I think I've said it in the past already, but hiring a group of white-hat hackers that will try and test their security is their best option. Pay them the money that they want to get because the amount of money that might lost in hacking will be much more than the payment to these hackers.