Gamdom Hack: $3M Admitted, $4.2M Tracked, Still Offline

Gamdom went offline on 13 October 2026, two hours after more than $2.3 million left its hot wallets on five chains in an hour. Founder Felix (@Romer) confirmed a breach the next day and put the loss at just over $3 million. On-chain analyst vxdb counts $4.208 million.

Gamdom hack: crypto casino offline after a $3M hot wallet breach, with $4.2M counted on-chain

The founder said the site would be back “in a couple of hours”. Two days later it is still dark at the time of writing, and the only word on player balances is the company’s own line that user funds are safe.

Duelbits lost about $7 million the same way three weeks earlier. By day three it had published the addresses of its refilled wallets and reopened. Gamdom has so far done neither.

Detail What We Know
Date 13 October 2026, afternoon UTC transfers; site offline from 18:45 UTC
Reported loss Just over $3M (founder, no breakdown)
On-chain estimate $4.208M (vxdb)
Chains Ethereum, Solana, BNB Chain, Tron, XRP Ledger (FairGambling); vxdb adds Polygon, Arbitrum, Optimism and Bitcoin
Cause as stated Unauthorised connection on an automation server (Gamdom); no attack vector published
Site status Offline since 13 October; “still taking some more time” on 15 October
Player funds Gamdom says safe; no proof of reserves published
Operator Not verifiable while the site and its terms are offline

What Gamdom Has Confirmed

Gamdom’s first post went up at 18:45 UTC on 13 October and said the site was offline and would be back soon. Nothing about why. The explanation came the next morning, and it started with a hardware fault.

Staff had been looking into a suspected disk failure on one server when they noticed an unauthorised connection on a separate automation server. Rather than isolate that machine, the company switched everything off.

The statement does not say what the automation server does, what the connection reached, or whether the transfers already visible on-chain were authorised. It asks for patience and says balances are safe. Later on 14 October the founder added the part that mattered.

It was the first time anyone at Gamdom had used the word breach, and the first loss figure. He gave no breakdown, said what was left in the hot wallets had been moved to cold storage, and promised a restart within a couple of hours.

By 15 October that had become something vaguer.

“Still taking some more time to bring it all back.” – Felix (@Romer), Gamdom founder, 15 October 2026

What Gamdom Has Not Said

Two posts from the company and two from its founder leave most of the useful questions open.

  • How the attacker got in. “Unauthorised connection” describes the symptom, not the route.
  • What the automation server controls. If it signs withdrawals, the hot wallet keys were exposed.
  • The loss by chain. Without a breakdown, the $3 million cannot be reconciled with the on-chain count.
  • Proof behind “user funds are safe”. No reserve figure, no addresses, no balance snapshot.
  • A reopening date, or any mention of law enforcement.

How the Gamdom Hack Unfolded

The chain gives the order of events, and it is less flattering than the statements. Independent tracker FairGambling had Gamdom’s hot wallet holdings at $10.5 million on 12 October and about $76,000 a day later. Every large transfer it identified had finished roughly two hours before Gamdom posted a word.

Time (UTC) Source What Happened
13 Oct, 15:50 to 16:50 On-chain (FairGambling) Hot wallets on Ethereum, Solana, BNB Chain, Tron and XRP Ledger each send a large payment to one wallet on that chain; at least four of the five recipients are brand new
13 Oct, within 80 min On-chain Tron and XRP recipients start passing funds on
13 Oct, 17:42 On-chain ETH recipient sends a small amount of ether to an older Gamdom wallet; minutes later that wallet sends about $10,000 in BUSD to the BNB Chain recipient
13 Oct, 18:45 @gamdom “We’re currently offline, will be back up and running soon.” No reason given
14 Oct, 01:35 On-chain Two Ethereum wallets hold about $2M between them, mostly DAI
14 Oct, morning @gamdom Disk failure, unauthorised connection, all systems offline, user funds safe
14 Oct @Romer Breach of hot wallet system confirmed; loss “just over $3m”; restart “in a couple of hours”
15 Oct vxdb On-chain loss put at $4.208M across eight networks
15 Oct @Romer “Still taking some more time to bring it all back”

What the timing shows: the drain ran from about 15:50 UTC, Gamdom’s first post came at 18:45, and the word breach did not appear until the following afternoon. Anyone watching the chain had the story a day before the operator told it.

Where the Gamdom Money Went

The Ethereum leg is the easiest to follow. One newly created wallet, 0x4b30…9ab8, took in about $1.2 million from three Gamdom hot wallets during the afternoon and started converting its USDT and USDC into DAI within minutes.

Tether and Circle can freeze their tokens at a flagged address; DAI has no issuer to ask.

A second wallet, at the same address that received Gamdom’s BNB Chain payment, collected roughly $870,000 in DAI, much of it over the Relay bridge. Before dawn on 14 October the pair held about $2 million.

FairGambling’s latest reading has them at around $1.8 million in DAI plus 87 ETH, and nothing has moved since the evening of the 13th.

The full transaction history is on Etherscan. The other recipients have not been published by address, though the Tron and XRP wallets were forwarding funds within 80 minutes.

$3 Million or $4.2 Million? Why the Figures Differ

Three numbers are doing the rounds and they do not measure the same thing. The founder’s “just over $3m” is the operator’s own estimate, with no chain breakdown.

vxdb’s $4.208 million comes from reading the chains directly, and the graphic below shows how it splits.

FairGambling’s $10.5 million is a balance drop across the hot wallets it tracks, so it folds in whatever the founder moved offline deliberately once the drain was spotted.

The gap between the first two could be token prices at the moment of counting, transfers Gamdom made itself, or money recovered since. Only a post-mortem with Gamdom’s own chain by chain figures will close it.

Gamdom hack infographic comparing the founder's reported loss of just over $3M with vxdb's on-chain estimate of $4.208M, broken down as $2.2M on EVM networks, $668K Bitcoin, $965K Solana and $375K Tron

Is Gamdom Safe Right Now?

Are Gamdom User Funds Safe?

Gamdom says so in its 14 October statement, and the founder says the remaining hot wallet funds are now in cold storage.

What neither has offered is anything a player could check for themselves: a reserve figure, published addresses holding enough to cover balances, or a withdrawal queue clearing at normal speed.

What would prove it: published reserve addresses that cover every player balance, or withdrawals clearing normally once the site returns. Until one of those happens, “user funds are safe” is a statement, not evidence.

Balances on the site are custodial. The number in your account is a claim on Gamdom, not coins in a wallet you hold.

Moving the remaining funds offline was the sensible thing for the operator to do, but it also means that money has to come back out before anyone gets paid.

Is Gamdom Down? Withdrawals and Reopening

Yes. Gamdom has been offline since 13 October. The founder’s restart estimate lapsed on the 14th and his post on the 15th did not replace it. When the site does come back, the thing to watch is whether withdrawals go through, not whether the homepage loads.

What Gamdom Players Should Do Now

If you have a balance there, a few things are worth doing while it is dark.

  • Keep your records. Deposit and withdrawal transaction IDs, plus any screenshot or email showing your balance.
  • Use official channels only. Updates come from @gamdom and @Romer on X. Nobody from Gamdom will message you first.
  • Ignore recovery offers. Scammers follow every public hack, and no real support agent asks for a seed phrase, password or 2FA code.
  • Withdraw to a wallet you control once it reopens. Keep on site only what you are about to play with.

Gamdom, Duelbits and Rollbit: Three Hot Wallet Scares in Three Months

Gamdom is the third crypto casino since August to watch its hot wallet balances collapse in public, and the second confirmed hack. The first was the Duelbits hack that drained $7M in September, the second breach at that casino since 2024.

Rollbit is the one without a hack. FairGambling tracked its hot wallets falling 97% in a week in August, from $29.2 million to about $765,000, and staff said the casino was moving funds onto new chains.

Withdrawals kept processing and no breach was ever reported, which is roughly what a treasury move looks like from the outside.

Casino Date Reported Loss How It Happened What Happened Next
Stake Sep 2023 About $41M Breach of the service that authorised transactions; FBI attributed it to Lazarus Affected wallets back within hours
Duelbits Feb 2024 About $4.6M Possible private key compromise Services continued; funds declared safe
MetaWin Nov 2024 Over $4M Withdrawal system exploit CEO said he covered the losses personally
BC.GAME Mar 2026 $4.3M Vulnerability in a third party game Stayed online; $500K bounty
Duelbits Sep 2026 About $7M Suspected private key compromise Offline three days; reopened 27 Sep with about $8M across wallets
Gamdom Oct 2026 $3M (operator) to $4.2M (vxdb) Unauthorised connection on an automation server; no vector published Offline since 13 Oct; no reopening date

Nearly all of these came down to someone getting hold of wallet access. The odd one out was the BC.GAME third party game exploit, which cost $4.3 million through a game rather than a key and never took the site down.

How Gamdom’s Response Compares With Duelbits

Duelbits is the fairest yardstick because its hack came three weeks earlier and was about twice the size. It confirmed the loss the same day, named the refilled wallets before reopening, and had deposits and withdrawals running again on day three.

Gamdom took a day to confirm a loss, has named no wallets, and is still closed.

Gamdom did post sooner, about two hours after the transfers against nearly three for Duelbits, but that post said offline and nothing else. Neither has published a proof of reserves, so on what a player can see, one has shown its withdrawals working and one has not.

What Happens Next

The first thing to watch is the reopening itself, and specifically whether withdrawals clear at normal speed once the site is back or arrive with new limits attached. A homepage loading proves nothing.

After that, the detail. Gamdom has promised only “updates”, but a post-mortem would need to name the route in, say what the automation server controls, and set its own chain by chain figure against the $4.208 million vxdb counted.

Published addresses for the refilled wallets would let anyone check the balance behind “funds are safe”, which is what Duelbits did before it reopened.

Then there is the money. About $1.8 million in DAI is still sitting in two Ethereum wallets, and a move to an exchange would be the first real chance of a freeze. No investigator has named an attacker.

This article will be updated as Gamdom posts. For a sense of how much the biggest crypto casinos take in on-chain, the market report tracking 41 crypto casinos has the deposit figures.

FAQs

What happened in the Gamdom hack?

On 13 October 2026, more than $2.3 million left Gamdom’s hot wallets on Ethereum, Solana, BNB Chain, Tron and the XRP Ledger inside an hour, and the crypto casino took its site offline. On 14 October founder Felix (@Romer) confirmed a breach of the hot wallet system after staff found an unauthorised connection on an automation server.

How much was stolen from Gamdom?

Gamdom’s founder put the loss at just over $3 million. On-chain analyst vxdb counts $4.208 million across eight networks, including $2.2 million on EVM chains, $965,000 on Solana, $375,000 on Tron and $668,000 in Bitcoin. Gamdom has not published a breakdown, so the gap is unexplained.

Is Gamdom down?

Yes. Gamdom has been offline since the evening of 13 October 2026. The founder said on 14 October that the site would return in a couple of hours, and on 15 October that it was still taking more time. No reopening date has been given.

Are Gamdom user funds safe?

Gamdom says user funds are safe, but it has published no proof of reserves, no wallet addresses and no withdrawal plan. Balances are custodial, so players cannot check until withdrawals work again.

What did Gamdom say caused the breach?

Gamdom said staff investigating a suspected disk failure on one server found an unauthorised connection on a separate automation server, and took all systems offline as a precaution. It has not named the attack vector or said what the automation server controls.

Is the Gamdom hack connected to the Duelbits hack?

No link has been reported. Both are crypto casino hot wallet drains inside a three-week window, and both operators said user funds were safe, but no investigator has tied the two incidents to the same attacker.

Der Beitrag Gamdom Hack: $3M Admitted, $4.2M Tracked, Still Offline erschien zuerst auf VIP-Grinders.

Full Article

About The Author