Gamdom hacked for a 3M$

[nelson4lov]

Been seeing them on X lately, and with high frequency.  It sucks to be hacked but then again, it can happen to any person or platform. They have been running shit ton of influencer marketing and campaigns some of which are handled by SteveWillDoIt. Maybe it's time they slow it down a bit and focus on beefing up their security.

[Bright0515]

Another day, another hack. Can we just have one peaceful day --- every day we're just being told about this hack and that hack.

But that's how it is, the potential for hacks will always exist no matter how well they design their security --- there will always be a loophole that hackers can exploit to break into their system. Luckily, they still have a chance to move most of their assets to cold storage, otherwise it could be a huge disaster for them. Hopefully, they can solve the problem and get back to normal operations.

It is becoming a regular thing and this is quite concerning, I hope this doesn't happen to a major casino again. It was difficult for hackers to discover loopholes into the system of casinos but now it seems almost easy to break into their system, are there no longer putting in efforts to cover these loopholes or have hackers become more smarter and perhaps the use Ai is making this easier for them? From the few informations I came across it seems the casino is back online.

[sunsilk]

Shouldn't there be a better way for these sites to secure their funds? How about having their funds locked up on some cold storage instead and only leave a small amount connected to their hot wallets?.

These hackers probably have seen the loophole already and studied for some time their process.

I think platforms like the casinos and the exchanges have their cold storage ready and the hot wallets but due to the flow of withdrawals and deposits.

They probably have the multisig as well but these hackers just understand these things and they're looking for which one has got the lesser security.

So after the incident, they're live, back and operating again.

[ultrloa]

I think we should wait for the official announcement before concluding that the gambling site has been hacked. What was seen from Gandom was unauthorized connection on one of their automation servers.

It was said that users funds are safe, but which we can not believe for now because of the transfer of such amount of money. So we can not believe the gambling site wallet has not been hacked until an official statement that says otherwise.

Edit:
If Felix Römer is the founder of Gandom, the $3 million hack is true according to his post on X.

$3 million is the amount the founder gave but some sources say that it was slightly higher than that, I have reasons to believe that he only put it at the figure so players wouldn't fee like the casino is going bankrupt or something. You are right about not believing that the players funds are safe just because they said so, it is possible for them to be going through a serious set back at the moment but trying to keep it cool so that players won't lose hope in the casino. They are currently back online but we still await further informations.

Well that is the best thing they could do for now, then see what are the other counter actions done.

But since they go back operating now, I think best to look if Gamdom operations goes back to normal or their players will encounter withdrawal delays or other issues.

I don't see people complaining about their funds and it seems they handle this situation well.

Guess lets just see if they recover like Duelbits or they start to fall down after they experience some tragic incident.

[yahoo62278]

I think we should wait for the official announcement before concluding that the gambling site has been hacked. What was seen from Gandom was unauthorized connection on one of their automation servers.

It was said that users funds are safe, but which we can not believe for now because of the transfer of such amount of money. So we can not believe the gambling site wallet has not been hacked until an official statement that says otherwise.

Edit:
If Felix Römer is the founder of Gandom, the $3 million hack is true according to his post on X.

$3 million is the amount the founder gave but some sources say that it was slightly higher than that, I have reasons to believe that he only put it at the figure so players wouldn't fee like the casino is going bankrupt or something. You are right about not believing that the players funds are safe just because they said so, it is possible for them to be going through a serious set back at the moment but trying to keep it cool so that players won't lose hope in the casino. They are currently back online but we still await further informations.

Well that is the best thing they could do for now, then see what are the other counter actions done.

But since they go back operating now, I think best to look if Gamdom operations goes back to normal or their players will encounter withdrawal delays or other issues.

I don't see people complaining about their funds and it seems they handle this situation well.

Guess lets just see if they recover like Duelbits or they start to fall down after they experience some tragic incident.

I have had 0 issues with withdraws being delayed or anything. Everything seems to be operating like it has been operating for awhile now. I don't think anyone has any worries.

[Hispo]

Been seeing them on X lately, and with high frequency.  It sucks to be hacked but then again, it can happen to any person or platform. They have been running shit ton of influencer marketing and campaigns some of which are handled by SteveWillDoIt. Maybe it's time they slow it down a bit and focus on beefing up their security.

I am very sure their security team are going change more then one single thing when comes to how the crypto currency of the casino is handled, for the sake of making things like this hack harder to be carried out by hackers and cyber criminals.

Three million dollars is a hard punch to take, but I believe this casino is big enough so they can recover from it in a relatively short period of time, and keeping their hot wallets functioning as they usually do.

[xenomorfo]

I am very sure their security team are going change more then one single thing when comes to how the crypto currency of the casino is handled, for the sake of making things like this hack harder to be carried out by hackers and cyber criminals.

Three million dollars is a hard punch to take, but I believe this casino is big enough so they can recover from it in a relatively short period of time, and keeping their hot wallets functioning as they usually do.

I hope so for them, given the increase in attacks in this last period we need to equip ourselves because the risk is too high.
There is a risk of closing down even for companies that are truly solid and honest and this would displease me very much.

[Swordsoffreedom]

Been seeing them on X lately, and with high frequency.  It sucks to be hacked but then again, it can happen to any person or platform. They have been running shit ton of influencer marketing and campaigns some of which are handled by SteveWillDoIt. Maybe it's time they slow it down a bit and focus on beefing up their security.

I don’t think reducing marketing is only solution. Rather, it is necessary to evaluate how effective security investment are, alongside marketing budget. Any crypto casino can bring in thousand of new customer through influencer sponsorship and promotion. Therefore, they will not be able to reduce these easily. However, if an attack on their wallet management system, withdrawal automation or server under administrative control were to succeed then the entire infrastructure built alongside their growth would face major security risk and liability.

In my view, casino should ensure layered safeguards such as least privilege access, isolated signing infrastructure, multisig or appropriate threshold control, withdrawal limit and independent security audit. After an incident simply saying “we improved security” makes no sense.

[Ziskinberg]

Been seeing them on X lately, and with high frequency.  It sucks to be hacked but then again, it can happen to any person or platform. They have been running shit ton of influencer marketing and campaigns some of which are handled by SteveWillDoIt. Maybe it's time they slow it down a bit and focus on beefing up their security.

You stop marketing, you stop accepting new users or retaining existing users. Stopping is not the solution, if a business cannot handle security even if other areas are running well then they have a weak system and they are putting their money at risk. The solution here is maybe they should add more people to do the job or hire the best cybersecurity engineers to ensure that this incident will not happen again. Business should go on as usual and with the hacking incident they should be even more aggressive in marketing.

[Iranus]

They probably have the multisig as well but these hackers just understand these things and they're looking for which one has got the lesser security.

I think mere presence of multisig does not guarantee that entire infrastructure will be secure. It is better to keep signing keys in separate location. However, if any attacker somehow manage to gain control over withdrawal automation or privileged credential then problem still persist. They could then drain wallet by leveraging transaction approval workflow.

In my opinion, casino should not keep more liquidity than is necessary in its hot wallet.
Also it would have been better to have independent approval process for large withdrawal.
And if any abnormal outflow is detected then transfer can be halted using automated circuit breaker.

However, not all risk are technical. Credential theft, compromised server, excessive privilege and weak monitoring all of these create large attack surface.

[sompitonov]

You stop marketing, you stop accepting new users or retaining existing users. Stopping is not the solution, if a business cannot handle security even if other areas are running well then they have a weak system and they are putting their money at risk. The solution here is maybe they should add more people to do the job or hire the best cybersecurity engineers to ensure that this incident will not happen again. Business should go on as usual and with the hacking incident they should be even more aggressive in marketing.

I believe that hiring top-tier specialists does not guarantee protection against hacking, though it certainly reduces the likelihood. In the gambling industry, management must simply decide what level of expenditure they are prepared to commit to in order to secure their operations. Some may choose not to invest heavily and yet remain unbreached, while others might spend a great deal, only for attackers to still find loopholes and gain access to some of their funds. Ultimately, the conclusion is clear: one cannot afford to let their guard down. It is better to keep a close watch on all potential vulnerabilities so that, later on, you aren't left lamenting the loss of your funds.

[Lontor]

Online casinos have the money to spend on specialist to be honest but they felt they don't have to, now this hack will have to make them start looking out for specialist to hire, they have the money.

Better to spend money on specialists every month than some hackers coming to take millions from the platform in one go, every online casinos shouldn't have problem doing this.

[Africolo]

I think we should wait for the official announcement before concluding that the gambling site has been hacked. What was seen from Gandom was unauthorized connection on one of their automation servers.

It was said that users funds are safe, but which we can not believe for now because of the transfer of such amount of money. So we can not believe the gambling site wallet has not been hacked until an official statement that says otherwise.

Edit:
If Felix Römer is the founder of Gandom, the $3 million hack is true according to his post on X.

I agree with you, if the casinos has not come out to make an official announcement that such amount of money was hacked from their system we shouldn't be exaggerated to make such pronouncement and wait for it's official statement. This is how false information are spread so quickly and sometimes those that has an account with the casinos can easily fall into depression from carrying such unverified news.

I just hope that the users amount is safe as said since there's no official statement yet from them but I don't always encourage players to keep a large amount of money in their wallets  on any casino because it's risky. But I think if there's a glitch in the server the account might be tempered with or someone has been trying to hack it but nevertheless let's wait patiently to hear from the board when they make their official statement.

[Bright0515]

Online casinos have the money to spend on specialist to be honest but they felt they don't have to, now this hack will have to make them start looking out for specialist to hire, they have the money.

Better to spend money on specialists every month than some hackers coming to take millions from the platform in one go, every online casinos shouldn't have problem doing this.

I would say that some of them hire specialists but some of them don't go for the best, they employ cyber security professionals that don't charge them a high amount of money. It's quite outrageous if casinos run their system without having such experts at all, why get so economical with resources only to end up losing much more to hackers. Some casinos are just careless, it's absurd to hear about casinos that have been in the industry for over a decade getting hacked.

[KiaKia]

Been seeing them on X lately, and with high frequency.  It sucks to be hacked but then again, it can happen to any person or platform. They have been running shit ton of influencer marketing and campaigns some of which are handled by SteveWillDoIt. Maybe it's time they slow it down a bit and focus on beefing up their security.

You stop marketing, you stop accepting new users or retaining existing users. Stopping is not the solution, if a business cannot handle security even if other areas are running well then they have a weak system and they are putting their money at risk. The solution here is maybe they should add more people to do the job or hire the best cybersecurity engineers to ensure that this incident will not happen again. Business should go on as usual and with the hacking incident they should be even more aggressive in marketing.

I honestly don't expect any military grade security from casinos, it will cost them a lot but now that they are getting hacked left and right it's time they should start considering better security on their platforms.

If they can't get things done themselves they should hire security experts,.we have too many of them in this space and they will help set things up and also monitor traffics for any incoming threats.

The only difference is they will have to keep paying their security experts, hacking will be far away from them compared to other online casinos that are still sleeping on things.

[hedgeh0g]

I would say that some of them hire specialists but some of them don't go for the best, they employ cyber security professionals that don't charge them a high amount of money. It's quite outrageous if casinos run their system without having such experts at all, why get so economical with resources only to end up losing much more to hackers. Some casinos are just careless, it's absurd to hear about casinos that have been in the industry for over a decade getting hacked.

I believe that when gambling platforms even those that have been in the market for over 10 years get hacked, it isn’t necessarily because they hired incompetent security specialists. Rather, it could be that hackers simply discovered vulnerabilities in areas where other platforms might have had everything under control. There are countless potential attack vectors for instance, hackers might target private communications with staff or attempt to trick employees into revealing information that could facilitate a breach. Therefore, the fact that a gambling platform has been hacked does not automatically mean it had underlying security issues.

[DiMarxist]

This cases of hacking of cryptocurrency platform is becoming a monthly occurrence and surely not looking good in any way. We have not forgotten the hack of Duelbits, we are faced with another one in less than a month. What is really wrong that makes these hacks so easy
 now?

At this point we should be expecting another casino to be a target of these hackers again, if a casino like duelbits can get hacked then a lot of casinos are not safe from this if they don't take measures to upgrade their security systems. Technological advancements have made hacks more easier and also these operations are now easier because most of these hackers have insiders,  allegedly.

Could this be the result of AI? I understand that AI can easily be deployed to test for vulnerability of a platform, maybe this is how the hackers are exploiting these platforms.

This is also another angle to look at as well, these hackers can use Ai to detect loopholes in the systems of different casinos before the casinos even notices them, that is why hackers quickly exploit these rapidly. If these casinos also make use of Ai they would also respond promptly to cyber attacks before it gets worse or perhaps hiring cyber security experts can help.

[noorman0]

Online casinos have the money to spend on specialist to be honest but they felt they don't have to, now this hack will have to make them start looking out for specialist to hire, they have the money.

Better to spend money on specialists every month than some hackers coming to take millions from the platform in one go, every online casinos shouldn't have problem doing this.

You jump to conclusions too quickly. Gamdom is a licensed casino whose function is to receive internal supervision. I am sure that every layer of the casino backend is done by specialists.
Honestly I don't follow the case, I mean what the vector of this attack is. Code vulnerabilities are not the sole cause of exploitation. I also remember one hacking incident in the past due to the team's mistake in approving an unknown authorization via a phishing attack.

[uneng]

Online casinos have the money to spend on specialist to be honest but they felt they don't have to, now this hack will have to make them start looking out for specialist to hire, they have the money.

Better to spend money on specialists every month than some hackers coming to take millions from the platform in one go, every online casinos shouldn't have problem doing this.

You jump to conclusions too quickly. Gamdom is a licensed casino whose function is to receive internal supervision. I am sure that every layer of the casino backend is done by specialists.
Honestly I don't follow the case, I mean what the vector of this attack is. Code vulnerabilities are not the sole cause of exploitation. I also remember one hacking incident in the past due to the team's mistake in approving an unknown authorization via a phishing attack.

Even with cyber security professionals working on such platforms, they aren't invulnerable to hacks. There is a constant fight between hackers and defenders to find out who overcomes the other. Sometimes hackers find a gap and overcome the defenses available.

If I were one of those casino owners, I would restrict the amount of money available in hot wallets maximum as possible. The problem is that customers want quick and instant withdrawals, at same time they want total security, what is a hard equation to solve these days, considering the recent events involving successful hack attempts against casinos.

[pawanjain]

Been seeing them on X lately, and with high frequency.  It sucks to be hacked but then again, it can happen to any person or platform. They have been running shit ton of influencer marketing and campaigns some of which are handled by SteveWillDoIt. Maybe it's time they slow it down a bit and focus on beefing up their security.

Well said. Sometimes, these sites should rather focus on improving their security than spending millions on marketing.
What's the point of marketing a product with weaker security anyway ?
Now that they have suffered their fate may be they will understand the issue and try to improvise on the security of their site.