SecurityPublished:Aug 3, 2026, 1:30 AM
Alex Thorn, Head of Firmwide Research astatine Galaxy Digital, criticized Duel Casino for refusing to artifact astir 230 ETH allegedly stolen from a unfortunate of the Coldcard vulnerability. Nonetheless, Duel Casino refused to frost the funds without having grounds linking them to the hack.
Published: Aug 3, 2026, 1:30 AM
Key Takeaways
- Stolen bitcoin from the Coldcard exploit moved to Duel Casino, but the level refused to frost the funds.
- Duel Casino requires authoritative instrumentality enforcement confirmation earlier blocking idiosyncratic balances.
- Galaxy Digital’s Head of Research criticized Duel’s inaction arsenic complicit successful the monolithic cyber theft.
Coldcard Hack Spreads: Duel Casino Refuses to Freeze Funds Without Proof
Funds allegedly linked to the Coldcard vulnerability exploit are already connected the move, hitting third-party platforms arsenic criminals question to launder them.
Alex Thorn, Head of Firmwide Research astatine Galaxy Digital, alerted astir the behaviour of Duel Casino, an net gambling level that allegedly received astir 230 ETH from the Coldcard hack.
According to Thorn, the platform refused to frost these funds adjacent aft receiving data linking the addresses and transactions to the event. Duel’s effect asked for constabulary to interaction them, contempt supposedly having entree to incriminatory information.
Thorn labeled Duel’s inaction arsenic outrageous, stressing that nary constabulary study would get until Monday astatine best.
“These shady radical are refusing to frost funds that person been forensically proven to emanate from a unrecorded cyber incident. If they bash not frost the funds, they are complicit successful theft,” helium declared.
A Duel squad subordinate identified arsenic Korra connected X stressed that they can’t frost idiosyncratic funds lone due to the fact that a 3rd enactment claims they are stolen, arsenic determination could beryllium radical taking vantage of this system.
Korra past offered to marque an objection if the alleged unfortunate sent a connection from a “hacked” address, signed an affidavit claiming they were hacked, and showed a way of these funds entering Duel’s wallets.
“You person to recognize the crushed this argumentation exists, we necessitate SOME benignant of authoritative confirmation that an existent theft occurred (so confirmation from instrumentality enforcement of immoderate benignant usually), different anyone tin assertion worldly astir their ain equilibrium oregon a counterparty oregon a 3rd enactment they don’t adjacent cognize and get accounts frozen,” Korra stressed.
Duel Casino’s argumentation angered immoderate users, who criticised the gambling level for not issuing a impermanent artifact connected these funds portion investigating the root of the funds progressive successful the claim.
Even so, Korra doubled down connected Duel Casino’s position.
“We don’t frost your Duel equilibrium due to the fact that idiosyncratic asked america to. We simply don’t. I americium atrocious but that is however it is and we basal by that,” Korra concluded.
Former Delphi Digital CLO Gabriel Shapiro supported Duel Casino’s stance: “It continues to beryllium astir apt my lone unpopular presumption but I inactive deliberation this is beauteous overmuch the lone sane argumentation a crypto-adjacent fintech app tin have…” helium assessed.
As much wallets get drained and menace actors question to currency retired a information of the implicit 1,300 BTC stolen, expect more users, companies, and institutions to look akin dilemmas.

1 hour ago









English (US)