Gamdom Hot-Wallet Breach Puts Losses at $4.2M Across Eight Networks
A hot-wallet compromise at crypto gambling platform Gamdom spilled across eight different blockchain networks at once, a spread that shows how automated withdrawal systems built for speed can turn into a single point of failure once an attacker gets inside them. On-chain analysis puts the damage at roughly $4.2 million, which is more than the platform itself has disclosed, according to Cryptopolitan.
Key Takeaways
- On-chain investigator vxdb estimates total losses at $4.208 million, spread across Ethereum, BSC, Polygon, Arbitrum, Optimism, Solana, TRON and Bitcoin.
- Gamdom founder Felix Roemer said the platform lost “just over $3m to the breach,” a figure lower than the on-chain estimate, with the gap unexplained.
- The intrusion was first flagged as a suspected server disk failure before investigators traced it to an unauthorized connection on an automation server.
- The EVM-network losses, about $2.2 million, make up slightly more than half of the total, with Solana the single largest non-EVM share at $965,000.
- The incident echoes a September 2026 hot-wallet breach at Duelbits, where estimates ranged from $5.9 million to $7 million.
A Disk Failure That Led to a Breach
Gamdom’s security team didn’t start out looking for an attacker. According to TokenPost, the company first noticed what looked like a disk failure on one of its servers roughly 24 hours before it went public with the incident. Only during the follow-up investigation did the team find an unauthorized connection to an automated server, the system responsible for processing withdrawals without manual sign-off.
That detail matters because it points to the likely attack surface. Automation infrastructure that holds signing authority over hot wallets is valuable precisely because it removes a human from the withdrawal loop, which also means that whoever compromises it inherits that same authority. Gamdom took the platform offline while it ran checks, according to Cryptopolitan.
Gamdom founder Felix Roemer addressed the breach directly on social media. “We noticed a breach attacking our hot wallet system & we took measures to stop the drain, in total we lost just over $3m to the breach,” he wrote, adding that the team had “fully ran all checks & are now preparing to bring Gamdom back up,” a process he said would take a couple of hours, according to Cryptopolitan.
Losses Spread Across Eight Networks
The breakdown shows just how wide the exposure was. Per TokenPost, the EVM-network portion totaled about $2.2 million across five chains labeled ETH, BSC, POL, ARB and OP, corresponding to Ethereum, BNB Chain, Polygon, Arbitrum and Optimism. Outside the EVM world, Solana accounted for $965,000, Bitcoin for $668,000 and TRON for $375,000, figures that together with the EVM total land just over $4.2 million.
That spread is the signature of a hot-wallet-level compromise rather than a single smart-contract exploit. A vulnerability in one contract on one chain would typically cap losses to that chain. Draining wallets across five EVM chains plus Solana, TRON and Bitcoin in one incident suggests the attacker gained access to keys or signing infrastructure that spanned the platform’s entire withdrawal stack, not a flaw isolated to one network’s code.
A Gap Between Two Numbers
What hasn’t been resolved is why Gamdom’s own figure and the on-chain tally don’t match. Roemer’s “just over $3m” is notably below the $4.208 million that on-chain investigator vxdb calculated from wallet activity, and neither Gamdom nor vxdb has published a reconciliation, according to Cryptopolitan. Cryptopolitan noted that Arkham Intelligence is tracking wallets believed to belong to the attacker, but the outlet said it could not independently confirm individual transactions for its report.
Without a formal post-mortem from Gamdom, there’s no way yet to tell whether the gap reflects differences in how each side valued the stolen assets at the time of the theft, differences in which transactions each side counted, or funds Gamdom may have already recovered before publishing its number.
Part of a Pattern in Crypto Gambling
Gamdom isn’t the first crypto betting platform to lose funds this way this year. Duelbits suffered a suspected private-key compromise in September 2026 that Cryptopolitan estimated at between $5.9 million and $7 million, with CertiK placing the figure at around $6 million, according to Cryptopolitan. Both incidents share the same structural tension: hot wallets let operators process withdrawals instantly, which is the whole value proposition for a betting site, but that same always-on connectivity gives attackers a live target if they can get at the credentials or systems controlling it.
What to Watch
Gamdom has not yet released a formal post-mortem explaining the discrepancy between its disclosed $3 million figure and vxdb’s $4.208 million on-chain estimate, so that reconciliation remains the open item. The platform’s return from the offline state it entered during the investigation, and whether any of the stolen funds across the eight networks get frozen or recovered, are the next concrete markers to watch.
