PeckShield Flags $4.3M in Suspicious Duelbits Outflows, Including 836 ETH and 12.398B Shiba Inu

PeckShield Flags $4.3M in Suspicious Duelbits Outflows.

Blockchain security firm PeckShield has reported approximately $4.3 million in suspicious cryptocurrency outflows from Duelbits across Ethereum and $BNB Chain, involving $ETH, stablecoins, $BNB, and Shiba Inu.

#PeckShieldAlert #Duelbits has seen a suspicious outflow of ~$4.3M in crypto on #Ethereum and #BNBChain, including 836 $ETH($2.23M), 1.146M $USDT, 209 $BNB ($160.68K), 96.805K $USDC, 12.398B $SHIB ($70.17K), and 31.515K $DAI.

The attacker has since swapped the stolen funds for 1587.87… pic.twitter.com/zJ5HUtIghQ

— PeckShieldAlert (@PeckShieldAlert) September 24, 2026

PeckShield identified the recipient as an attacker and said the funds had been converted into approximately 1,587.87 $ETH, valued at around $4.2 million, alongside about 31,500 $DAI. Its alert did not identify how the funds were accessed or establish whether customer balances were affected.

$ETH, Stablecoins and 12.398 Billion $SHIB Involved

According to PeckShield, the suspicious outflows included 836 $ETH worth approximately $2.23 million, 1.146 million $USDT, and 209 $BNB valued at $160,680.

The firm also listed approximately 96,805 $USDC, 12.398 billion $SHIB worth $70,170, and 31,515 $DAI.

The $4.3 million figure represents PeckShield’s aggregate estimate. The individual amounts listed account for approximately $3.74 million at the quoted valuations, assuming the stablecoins traded near $1. The alert did not explain the difference between those figures.

Ethereum records dated September 24 show several incoming transfers from a Duelbits-labeled address to a wallet beginning 0xA77e24 and ending 05aef76. These included 31,515 $DAI at 09:00:35 UTC, approximately 12.4 billion $SHIB at 09:00:59, 96,804.68 $USDC at 09:01:23, and 593,430.32 $USDT at 09:02:11. The explorer also identified Duelbits as the address’s initial funding source.

Funds Moved Through deBridge and Relay Addresses

Subsequent transactions show the recipient moving assets to addresses associated with cross-chain services.

At 09:27:35 UTC, the wallet transferred 96,804.68 $USDC to a deBridge-labeled address. A separate transaction at 09:31:23 moved approximately 6.4 billion $SHIB to the same labeled destination. Four later $SHIB transactions, ranging from 1 billion to 2 billion tokens each, brought the displayed outgoing $SHIB total to approximately 12.4 billion.

The records also show six transfers of 100,000 $USDT each to Relay: Router V3, followed by another transfer of 83,346.89 $USDT. Together, those seven transactions amounted to 683,346.89 $USDT.

Following the transactions, the Ethereum address’s recorded balance stood at approximately 1,587.876 $ETH, valued by Etherscan at $4,190,468.37. Its remaining token holdings consisted of 31,515 $DAI worth approximately $31,510.37, placing the combined $ETH and $DAI balance at roughly $4.22 million at that snapshot.

Duelbits Previously Suffered a Separate Wallet Exploit

Duelbits, which operates a cryptocurrency casino and sports betting platform, previously suffered an exploit on February 13, 2024. De.Fi’s incident report recorded losses of approximately $4.64 million and identified a loss of wallet access control as the apparent cause. Assets taken in that incident were also bridged and exchanged into $ETH.

That historical finding does not establish the cause of the September 24 outflows. PeckShield’s latest alert focused on the assets moved and their subsequent conversion, without specifying an attack method.