Duelbits crypto casino saw $4.3M outflow across Ethereum and BNB Chain, PeckShield says

PeckShield flagged a suspicious outflow from Duelbits that totaled about $4.3M in crypto across Ethereum and BNB Chain. For high-risk payment teams, the interesting part is not just the size of the drain, but the familiar pattern that followed: quick cross-chain movement and conversion into ETH, which is exactly the sort of trail that makes recovery and source-of-funds tracing messy.

1. PeckShield said the outflow included 836 ETH worth $2.23M, 1.146M USDT, 209 BNB worth $160,680, 96.805K USDC, 12.398B SHIB worth $70,170, and 31.515K DAI. The firm identified the recipient as an attacker after the stolen assets were rapidly swapped into 1,587.87 ETH worth about $4.2M and 31.5K DAI.
2. PeckShield did not specify how the casino’s funds were accessed or whether customer balances were affected. That matters because on the ops side, the difference between a platform treasury hit and a client-funds incident changes the whole response tree: user communication, reserve handling, and whether the damage stays inside the house or spills into the payment flow.
3. According to Etherscan, on September 24 several inbound transactions came from a Duelbits crypto address to one ending in 0xA77e24...05aef76. Those transfers included 31,515 DAI, about 12.4B SHIB, 96,804 USDC, and 593,430 USDT, and Etherscan identified Duelbits as the original source of the funds sent to that address.
4. The recipient then routed assets through cross-chain-related addresses. The 96,804 USDC went to an address tagged as deBridge, while SHIB was split into multiple transfers, including one of about 6.4B tokens and four more transfers ranging from 1B to 2B tokens each. USDT was moved in six separate 100,000 transfers to Relay: Router V3, followed by one more transfer of 83,346 USDT, bringing the seven transfers to 683,346 USDT.
5. After those movements, the Ethereum address still held 1,587 ETH and 31,515 DAI, with a combined value of $4.22M. That is the useful operational takeaway: the funds were not just drained, they were actively reshaped into a smaller number of harder-to-freeze assets.

This was not Duelbits’ first incident. More than two years ago, the crypto casino was hit by a hack, and in February 2024 its wallet was breached for $4.64M. The assets stolen in that earlier incident were also moved through a cross-chain bridge and exchanged into ETH.