Duelbits Review 2026: Offline After a $7 Million Hot-Wallet Hack
Status, 25 September 2026: Duelbits has been offline since 24 September, after attackers drained its hot wallets. Don’t deposit until the site is back and Duelbits has published what went wrong.
Bonus Status: Not Graded
There’s no site to check, so there’s no bonus to grade. Duelbits says it will come back as “Duelbits 2.0”, so expect the promotions to change as well. We’ll grade the welcome offer once the new site is live.
🗓️ Last updated: 25 September 2026
Table of Contents
What Happened on 24 September
On 24 September 2026, blockchain security firms picked up large withdrawals from Duelbits’ hot wallets on Ethereum, BNB Chain and Tron. The estimates grew over the day:
| Source | Estimated loss |
|---|---|
| ScamSniffer (first report) | about $4.2 million |
| PeckShield | about $4.3 million |
| ScamSniffer (after counting 8.1 BTC) | about $4.9 million |
| CertiK | about $6 million |
| Joe, Duelbits co-founder, on X | about $7 million |
The listed outflows included 836 ETH, 1.62 million USDT, 97,000 USDC, 209 BNB, 192,000 TRX and 8.1 BTC. They were quickly swapped into ETH and DAI.
Security researchers suspect a stolen private key rather than a coding flaw. The Ethereum address the money came from is the same one Duelbits announced as its replacement hot wallet in February 2024. That replacement followed the previous hack, when about $4.6 million left Duelbits wallets.
Joe and CEO Jasper both said “user funds are safe”. Joe also said the site should be back within about 15 hours, with rebuilt deposit and withdrawal servers, and promised an official statement within 24 hours.
Meanwhile, duelbits.com shows a page calling the outage “planned maintenance”. It wasn’t planned.
For scale, FairGambling’s tracker counted about $190.6 million deposited into Duelbits over the 12 months to 24 September, from more than 85,000 addresses.
What Players Should Do Now
- If you have a balance: save the transaction hashes for every deposit and withdrawal from your wallet or exchange history now. You can’t open your Duelbits account history while the site is down, and the hashes are your proof if a balance comes back wrong.
- Deposit addresses: don’t send crypto to a Duelbits deposit address you saved before 24 September. The hacked wallet was itself a 2024 replacement, and Duelbits is rebuilding its deposit servers. Get a fresh address from the cashier after relaunch.
- Phishing: Duelbits has told players to trust only its verified channels. Anyone DMing you a “claim your refund” link or a “Duelbits 2.0 migration” form is not Duelbits.
About Duelbits & Reputation
Duelbits launched in 2020. The footer names the operator and its service company:
- Operator: Liquid Entertainment N.V. (Curaçao reg. no. 153298), at the Zuikertuin Tower in Willemstad.
- Services: Herpestidae Services Limited (HE 410029), a wholly owned subsidiary in Nicosia, Cyprus, runs management, payments and support.
- Licence: the footer says it’s licensed “by the Government of Curacao”. It gives no licence number, while most Curaçao operators we review now show an OGL/2024 number.
Some trouble came before the hack. By May 2026, Duelbits was replying to Trustpilot complaints by saying it had simplified its promotion terms. On 2 September it described Duelbits 2.0 as a rebuild of the site, support and VIP programme.
What the Product Looked Like Before the Outage
- Casino: over 4,000 games from 60+ providers, with each slot’s RTP and volatility shown when you hovered over it. Few Curaçao sites offer that.
- Sportsbook: margins of about 3.5 to 4.2% on NBA spreads, 5 to 6% on tennis and about 8% on esports, but with clunky navigation and no search.
- Payments: 15+ cryptocurrencies, plus Revolut and NeoSurf, and crypto purchases through Changelly.
- KYC: soft by default, so most players cashed out without sending documents unless an AML check was triggered.
All of this may change with Duelbits 2.0.
Expert Verdict by Balazs Pal
One hot-wallet breach can happen to anyone. Two, with the second coming from the wallet brought in to fix the first, says Duelbits’ key security never got the overhaul the 2024 hack called for.
“User funds are safe” is a claim until every withdrawal requested after the relaunch has been paid. Duelbits paid out quickly for years, and that record counts, but it doesn’t outweigh an unexplained $7 million hole.
Our rule until Duelbits publishes the root cause and withdrawals are clearly flowing again: don’t deposit anything you’d hate to see frozen.
Freshly Updated Crypto Bonus Reviews
Duelbits FAQ
Why is Duelbits down?
Attackers drained Duelbits’ hot wallets on 24 September 2026. Loss estimates range from about $4.2 million to the co-founder’s figure of about $7 million, and the site has been offline since.
Are player balances safe?
Duelbits’ co-founder and CEO both say user funds are safe. We’d treat that as confirmed once withdrawals are being paid normally after the relaunch.
Has Duelbits been hacked before?
Yes. About $4.6 million was drained in February 2024. The September 2026 outflows came from the replacement hot wallet Duelbits set up after that hack.
Does Duelbits have a welcome bonus?
None can be checked while the site is offline. We’ll grade the offer once Duelbits 2.0 launches.
Who operates Duelbits?
Liquid Entertainment N.V. (Curaçao, reg. no. 153298), with Herpestidae Services Limited in Cyprus handling management, payments and support.