Gamdom hacked for a 3M$

[nelson4lov]

Been seeing them on X lately, and with high frequency.  It sucks to be hacked but then again, it can happen to any person or platform. They have been running shit ton of influencer marketing and campaigns some of which are handled by SteveWillDoIt. Maybe it's time they slow it down a bit and focus on beefing up their security.

[Bright0515]

Another day, another hack. Can we just have one peaceful day --- every day we're just being told about this hack and that hack.

But that's how it is, the potential for hacks will always exist no matter how well they design their security --- there will always be a loophole that hackers can exploit to break into their system. Luckily, they still have a chance to move most of their assets to cold storage, otherwise it could be a huge disaster for them. Hopefully, they can solve the problem and get back to normal operations.

It is becoming a regular thing and this is quite concerning, I hope this doesn't happen to a major casino again. It was difficult for hackers to discover loopholes into the system of casinos but now it seems almost easy to break into their system, are there no longer putting in efforts to cover these loopholes or have hackers become more smarter and perhaps the use Ai is making this easier for them? From the few informations I came across it seems the casino is back online.

[sunsilk]

Shouldn't there be a better way for these sites to secure their funds? How about having their funds locked up on some cold storage instead and only leave a small amount connected to their hot wallets?.

These hackers probably have seen the loophole already and studied for some time their process.

I think platforms like the casinos and the exchanges have their cold storage ready and the hot wallets but due to the flow of withdrawals and deposits.

They probably have the multisig as well but these hackers just understand these things and they're looking for which one has got the lesser security.

So after the incident, they're live, back and operating again.

[ultrloa]

I think we should wait for the official announcement before concluding that the gambling site has been hacked. What was seen from Gandom was unauthorized connection on one of their automation servers.

It was said that users funds are safe, but which we can not believe for now because of the transfer of such amount of money. So we can not believe the gambling site wallet has not been hacked until an official statement that says otherwise.

Edit:
If Felix Römer is the founder of Gandom, the $3 million hack is true according to his post on X.

$3 million is the amount the founder gave but some sources say that it was slightly higher than that, I have reasons to believe that he only put it at the figure so players wouldn't fee like the casino is going bankrupt or something. You are right about not believing that the players funds are safe just because they said so, it is possible for them to be going through a serious set back at the moment but trying to keep it cool so that players won't lose hope in the casino. They are currently back online but we still await further informations.

Well that is the best thing they could do for now, then see what are the other counter actions done.

But since they go back operating now, I think best to look if Gamdom operations goes back to normal or their players will encounter withdrawal delays or other issues.

I don't see people complaining about their funds and it seems they handle this situation well.

Guess lets just see if they recover like Duelbits or they start to fall down after they experience some tragic incident.

[yahoo62278]

I think we should wait for the official announcement before concluding that the gambling site has been hacked. What was seen from Gandom was unauthorized connection on one of their automation servers.

It was said that users funds are safe, but which we can not believe for now because of the transfer of such amount of money. So we can not believe the gambling site wallet has not been hacked until an official statement that says otherwise.

Edit:
If Felix Römer is the founder of Gandom, the $3 million hack is true according to his post on X.

$3 million is the amount the founder gave but some sources say that it was slightly higher than that, I have reasons to believe that he only put it at the figure so players wouldn't fee like the casino is going bankrupt or something. You are right about not believing that the players funds are safe just because they said so, it is possible for them to be going through a serious set back at the moment but trying to keep it cool so that players won't lose hope in the casino. They are currently back online but we still await further informations.

Well that is the best thing they could do for now, then see what are the other counter actions done.

But since they go back operating now, I think best to look if Gamdom operations goes back to normal or their players will encounter withdrawal delays or other issues.

I don't see people complaining about their funds and it seems they handle this situation well.

Guess lets just see if they recover like Duelbits or they start to fall down after they experience some tragic incident.

I have had 0 issues with withdraws being delayed or anything. Everything seems to be operating like it has been operating for awhile now. I don't think anyone has any worries.

[Hispo]

Been seeing them on X lately, and with high frequency.  It sucks to be hacked but then again, it can happen to any person or platform. They have been running shit ton of influencer marketing and campaigns some of which are handled by SteveWillDoIt. Maybe it's time they slow it down a bit and focus on beefing up their security.

I am very sure their security team are going change more then one single thing when comes to how the crypto currency of the casino is handled, for the sake of making things like this hack harder to be carried out by hackers and cyber criminals.

Three million dollars is a hard punch to take, but I believe this casino is big enough so they can recover from it in a relatively short period of time, and keeping their hot wallets functioning as they usually do.

[xenomorfo]

I am very sure their security team are going change more then one single thing when comes to how the crypto currency of the casino is handled, for the sake of making things like this hack harder to be carried out by hackers and cyber criminals.

Three million dollars is a hard punch to take, but I believe this casino is big enough so they can recover from it in a relatively short period of time, and keeping their hot wallets functioning as they usually do.

I hope so for them, given the increase in attacks in this last period we need to equip ourselves because the risk is too high.
There is a risk of closing down even for companies that are truly solid and honest and this would displease me very much.

[Swordsoffreedom]

Been seeing them on X lately, and with high frequency.  It sucks to be hacked but then again, it can happen to any person or platform. They have been running shit ton of influencer marketing and campaigns some of which are handled by SteveWillDoIt. Maybe it's time they slow it down a bit and focus on beefing up their security.

I don’t think reducing marketing is only solution. Rather, it is necessary to evaluate how effective security investment are, alongside marketing budget. Any crypto casino can bring in thousand of new customer through influencer sponsorship and promotion. Therefore, they will not be able to reduce these easily. However, if an attack on their wallet management system, withdrawal automation or server under administrative control were to succeed then the entire infrastructure built alongside their growth would face major security risk and liability.

In my view, casino should ensure layered safeguards such as least privilege access, isolated signing infrastructure, multisig or appropriate threshold control, withdrawal limit and independent security audit. After an incident simply saying “we improved security” makes no sense.

[Ziskinberg]

Been seeing them on X lately, and with high frequency.  It sucks to be hacked but then again, it can happen to any person or platform. They have been running shit ton of influencer marketing and campaigns some of which are handled by SteveWillDoIt. Maybe it's time they slow it down a bit and focus on beefing up their security.

You stop marketing, you stop accepting new users or retaining existing users. Stopping is not the solution, if a business cannot handle security even if other areas are running well then they have a weak system and they are putting their money at risk. The solution here is maybe they should add more people to do the job or hire the best cybersecurity engineers to ensure that this incident will not happen again. Business should go on as usual and with the hacking incident they should be even more aggressive in marketing.

[Iranus]

They probably have the multisig as well but these hackers just understand these things and they're looking for which one has got the lesser security.

I think mere presence of multisig does not guarantee that entire infrastructure will be secure. It is better to keep signing keys in separate location. However, if any attacker somehow manage to gain control over withdrawal automation or privileged credential then problem still persist. They could then drain wallet by leveraging transaction approval workflow.

In my opinion, casino should not keep more liquidity than is necessary in its hot wallet.
Also it would have been better to have independent approval process for large withdrawal.
And if any abnormal outflow is detected then transfer can be halted using automated circuit breaker.

However, not all risk are technical. Credential theft, compromised server, excessive privilege and weak monitoring all of these create large attack surface.