NewsCryptoGamdom hot-wallet breach: company reports $3M loss as on-chain estimate reaches $4.2M

Gamdom hot-wallet breach: company reports $3M loss as on-chain estimate reaches $4.2M

Author: Cryptopolitan·

Key Takeaways

  • •Gamdom reported losing just over $3 million in a hot-wallet breach, while on-chain investigator vxdb estimates the damage at $4.208 million, leaving the gap between the two figures unexplained.
  • •The breach was discovered after an apparent server disk failure led investigators to an unauthorized connection on an automation server, and the platform was taken offline while checks were completed before a planned restart.
  • •Stolen funds were spread across eight blockchain networks, including roughly $2.2 million on Ethereum, BSC, Polygon, Arbitrum and Optimism, plus $668,000 in Bitcoin, $965,000 in Solana and $375,000 in TRON.
  • •The incident follows a similar September 2026 attack on crypto platform Duelbits, with estimated losses of $5.9 million to $7 million, highlighting shared hot-wallet vulnerabilities among crypto gambling sites.
  • •TRM Labs recorded an all-time-high 207 crypto hacks in the first half of 2026 with $972 million in losses, and infrastructure or operational compromises accounted for approximately 76% of stolen funds.
Gamdom hot-wallet breach: company reports $3M loss as on-chain estimate reaches $4.2M

Crypto gambling platform Gamdom reported losing just over $3 million in a hot-wallet breach, but on-chain investigator vxdb estimates the damage at $4.208 million. The discrepancy between the two figures remains unexplained, and the incident has raised fresh questions about how gambling platforms protect the funds they hold for instant withdrawals.

A disk failure that turned out to be a breach

In its October 14 statement, Gamdom said an apparent server disk failure led investigators to discover an unauthorized connection on an automation server. The company took its platform offline while it investigated the breach.

Gamdom founder Felix Roemer confirmed that the hacking incident affected the platform's hot wallets. He said the team had halted the outflow of funds, completed its checks, and was preparing for a restart. In a post on X, he described the scale of the losses:

We have fully ran all checks & are now preparing to bring Gamdom back up – this process will take a couple of hours Long story short, we noticed a breach attacking our hot wallet system & we took measures to stop the drain, in total we lost just over $3m to the breach and…

— Felix (@Romer) October 14, 2026

$3 million disclosed, $4.2 million on chain

The disclosed figure is lower than the $4.208 million estimated by vxdb. According to the on-chain investigator, approximately $2.2 million was stolen across Ethereum, BSC, Polygon, Arbitrum and Optimism. The remaining losses included $668,000 in Bitcoin, $965,000 in Solana and $375,000 in TRON, meaning the stolen funds were spread across eight blockchain networks in total. That spread illustrates the reach of a single hot-wallet compromise: once the wallet system itself is breached, funds across every connected network are exposed at once, not just on one chain.

There is still no explanation for the gap between the two figures. Arkham Intelligence monitors the wallets believed to belong to the attackers, but individual transactions could not be confirmed for this story. Because Gamdom has yet to publish an official post-mortem, it is not possible to determine whether the discrepancy stems from differences in asset valuations, the number of transactions counted, or the amount of recovered funds.

Echoes of the Duelbits hot-wallet hit

Gamdom's breach follows a similar attack on crypto platform Duelbits in September 2026. As Cryptopolitan reported, that suspected private-key compromise resulted in estimated losses of $5.9 million to $7 million, while CertiK placed the figure at approximately $6 million.

The two incidents illustrate a shared vulnerability among crypto gambling sites. Hot wallets enable operators to process withdrawals quickly, but the same connectivity that gives users convenient access also exposes these systems to attackers. Once hackers obtain the credentials or compromise the systems that manage the wallets, they can steal funds without breaking the security of the underlying blockchain. For gambling platforms, that trade-off is built into the service model: instant withdrawals require funds to sit in connected wallets rather than in cold storage.

Where this sits in a record year for hacks

The number of crypto hacks reached an all-time high in the first half of 2026, although the value stolen fell below previous years. According to TRM Labs, the first half of the year saw 207 incidents worth $972 million in losses, compared with $2.3 billion in lost assets in 2025.

The findings also show that the largest share of losses comes from attacks on operational systems rather than blockchain vulnerabilities.

"Infrastructure and operational compromises accounted for approximately 76% of all funds stolen" — TRM Labs, H1 2026 analysis

These compromises represented just 15% of incidents. Gamdom's own account of the breach — an unauthorized connection discovered on an automation server — matches that operational profile rather than a blockchain-level exploit. Meanwhile, CertiK's data shows third-quarter losses rising 56.2% to $1.28 billion, including $773.4 million in September.

So far, there is no evidence that Gamdom's breach has affected the broader crypto market. Coinbase Research reported positive trading metrics for September 2026, along with $2.6 billion in inflows into US Bitcoin ETFs. Those figures were published well before the attack and do not reflect any market reaction to the incident.

The platform's central challenge, however, is restoring customer confidence. Beyond compensating for the losses, Gamdom needs to show customers that it has strengthened wallet security to prevent similar breaches in the future. As the restart Roemer described moves forward, the markers to watch are the company's eventual post-mortem — the likeliest place for the gap between the disclosed and on-chain figures to be explained — and concrete detail on what wallet-security changes accompany the platform's return.