PeckShield Flags $4.3M in Suspicious Duelbits Outflows.
Blockchain security firm PeckShield has reported approximately $4.3 million in suspicious cryptocurrency outflows from Duelbits across Ethereum and BNB Chain, involving ETH, stablecoins, BNB, and Shiba Inu.
#PeckShieldAlert #Duelbits has seen a suspicious outflow of ~$4.3M in crypto on #Ethereum and #BNBChain, including 836 ETH($2.23M), 1.146M USDT, 209 BNB ($160.68K), 96.805K USDC, 12.398B SHIB ($70.17K), and 31.515K DAI.
The attacker has since swapped the stolen funds for 1587.87… pic.twitter.com/zJ5HUtIghQ
— PeckShieldAlert (@PeckShieldAlert) September 24, 2026
PeckShield identified the recipient as an attacker and said the funds had been converted into approximately 1,587.87 ETH, valued at around $4.2 million, alongside about 31,500 DAI. Its alert did not identify how the funds were accessed or establish whether customer balances were affected.
ETH, Stablecoins and 12.398 Billion SHIB Involved
According to PeckShield, the suspicious outflows included 836 ETH worth approximately $2.23 million, 1.146 million USDT, and 209 BNB valued at $160,680.
The firm also listed approximately 96,805 USDC, 12.398 billion SHIB worth $70,170, and 31,515 DAI.
The $4.3 million figure represents PeckShield’s aggregate estimate. The individual amounts listed account for approximately $3.74 million at the quoted valuations, assuming the stablecoins traded near $1. The alert did not explain the difference between those figures.
Ethereum records dated September 24 show several incoming transfers from a Duelbits-labeled address to a wallet beginning 0xA77e24 and ending 05aef76. These included 31,515 DAI at 09:00:35 UTC, approximately 12.4 billion SHIB at 09:00:59, 96,804.68 USDC at 09:01:23, and 593,430.32 USDT at 09:02:11. The explorer also identified Duelbits as the address’s initial funding source.
Funds Moved Through deBridge and Relay Addresses
Subsequent transactions show the recipient moving assets to addresses associated with cross-chain services.
At 09:27:35 UTC, the wallet transferred 96,804.68 USDC to a deBridge-labeled address. A separate transaction at 09:31:23 moved approximately 6.4 billion SHIB to the same labeled destination. Four later SHIB transactions, ranging from 1 billion to 2 billion tokens each, brought the displayed outgoing SHIB total to approximately 12.4 billion.
The records also show six transfers of 100,000 USDT each to Relay: Router V3, followed by another transfer of 83,346.89 USDT. Together, those seven transactions amounted to 683,346.89 USDT.
Following the transactions, the Ethereum address’s recorded balance stood at approximately 1,587.876 ETH, valued by Etherscan at $4,190,468.37. Its remaining token holdings consisted of 31,515 DAI worth approximately $31,510.37, placing the combined ETH and DAI balance at roughly $4.22 million at that snapshot.
Duelbits Previously Suffered a Separate Wallet Exploit
Duelbits, which operates a cryptocurrency casino and sports betting platform, previously suffered an exploit on February 13, 2024. De.Fi’s incident report recorded losses of approximately $4.64 million and identified a loss of wallet access control as the apparent cause. Assets taken in that incident were also bridged and exchanged into ETH.
That historical finding does not establish the cause of the September 24 outflows. PeckShield’s latest alert focused on the assets moved and their subsequent conversion, without specifying an attack method.