Key Highlights
- Duelbits reportedly saw about $4.3 million in suspicious crypto outflows across Ethereum and BNB Chain.
- The funds included ETH, USDT, BNB, USDC, SHIB and DAI, with most of the value later converted into ETH.
- PeckShield identified the receiving wallet as an attacker, but the exact access method and impact on customer funds remain unconfirmed.
Duelbits, a crypto casino and sportsbook, has reportedly seen about $4.3 million in suspicious cryptocurrency outflows across Ethereum and BNB Chain.
According to blockchain security firm PeckShield, the outflows were spotted on September 24, with several crypto assets leaving Duelbits-linked wallets before the funds were moved through other addresses and later changed mainly into ETH and DAI.
PeckShield said the outflow involved 836 ETH worth about $2.23 million, 1.146 million USDT, 209 BNB valued at around $160,680, 96,805 USDC, 12.398 billion SHIB worth about $70,170, and 31,515 DAI.
The firm identified the wallet receiving the funds as an attacker, but the firm did not say how the attacker gained access or whether customer funds were directly affected.
The funds moved to one wallet
According to the onchain data shared by PeckShield, the movement started to become clearer through Ethereum blockchain records. Several transfers were made from a Duelbits-labeled address to a wallet beginning with 0xA77e24 and ending in 05aef76.
The first recorded transfer arrived at 09:00:35 UTC, when the wallet received 31,515 DAI. Less than a minute later, about 12.4 billion SHIB was sent to the same wallet.
The activity continued quickly. At 09:01:23 UTC, the wallet received 96,804.68 USDC, followed shortly after by 593,430.32 USDT at 09:02:11 UTC. These transfers brought several different types of crypto into one wallet within a short period.
The crypto was moved again
The wallet did not simply keep the assets there. It began sending them through other addresses linked to crypto services that can move assets between different blockchain networks. At 09:27:35 UTC, 96,804.68 USDC was transferred to a deBridge-labeled address. About four minutes later, roughly 6.4 billion SHIB was sent to the same destination.
More SHIB transfers followed. Four additional transactions, ranging from 1 billion to 2 billion SHIB each, brought the displayed amount sent out to about 12.4 billion SHIB.
USDT also started moving out in several smaller transactions. Six transfers of 100,000 USDT each were sent to an address labeled Relay: Router V3. Another transaction then moved 83,346.89 USDT to the same destination. Together, the seven transfers moved 683,346.89 USDT.
After these movements, the wallet was left holding about 1,587.876 ETH and 31,515 DAI. Etherscan valued the ETH at approximately $4.19 million, while the DAI was worth about $31,510 at the recorded snapshot. Combined, the two assets were worth roughly $4.22 million.
The latest incident remains unclear
The final wallet balance also shows how the stolen assets were consolidated. Instead of remaining spread across ETH, USDT, USDC, BNB and SHIB, most of the value ended up as ETH, with a smaller amount kept in DAI.
There is also a difference between PeckShield’s reported $4.3 million total and the individual asset values listed in its alert. Those listed amounts add up to about $3.74 million based on the quoted prices. PeckShield did not explain the gap between the two figures.
Duelbits has faced a separate wallet incident before. In February 2024, Duelbits suffered a separate exploit that resulted in approximately $4.64 million in losses. De.Fi’s incident report said the apparent root cause was a loss of wallet access control.That earlier incident, however, does not show how the latest funds were accessed.
For now, PeckShield has not identified the exact method behind the September 24 movement. The firm has also not confirmed whether Duelbits customers lost funds, leaving the impact of the latest outflow unclear.
