Crypto Casino Hack and Exit Tracker: Every Incident We Could Source

This tracker is a dated log of 23 crypto casino hacks, supplier breaches, closures and one alleged exit scam, from 2014 to October 2026. Every row names its source, and amounts appear exactly as that source gave them. It holds 11 direct hacks, 2 supplier hacks, 4 data breaches, 5 closures and 1 alleged exit scam.

The log was last updated on 31 October 2026. It records reported events, not findings of guilt, and a listed brand may have repaid players or fixed the fault. Pair it with our licence validity index, which shows who holds which licence today.

Which crypto casinos have been hacked or shut down?

Recent cases in this log include Gamdom in October 2026, Duelbits in September 2026 and BC.Game in March 2026, all reported as thefts of company-held funds or exploits, not as lost player balances. BetHog and Luck.io closed in 2026, and Stake lost $41 million in 2023 in a theft the FBI attributed to Lazarus Group.

Where two figures exist, both are shown with who gave each one. Exchange hacks are left out, even very large ones, because this log covers gambling platforms and the payment suppliers that serve them.

What happens to player funds after a crypto casino is hacked?

In most rows, the operator says player balances were safe and keeps paying withdrawals from its own reserves. That claim usually rests on the operator’s word, because few casinos publish proof of reserves. Stake, Gamdom and Duelbits all said user funds were safe; MetaWin’s CEO implied he covered the loss himself. Treat such statements as unverified until withdrawals actually clear.

A crypto casino holds an online hot wallet to pay withdrawals quickly. When that wallet is drained, the loss lands on the company first, and the player risk comes later if reserves cannot cover balances. Thefts rarely stay on one chain: Gamdom’s on-chain estimate spread across Ethereum-compatible networks, Solana, Bitcoin and Tron.

What is the difference between a hack, a closure and an exit scam?

A hack is a theft from the casino or a supplier by an outsider. A closure is the operator ending the business, which can be orderly, with notice and open withdrawals. An exit scam is an alleged plan to take deposits and disappear. Only a court can settle that last label, so this log uses “alleged” where authorities or sources do.

How can I spot a crypto casino in trouble?

Warning signs include withdrawals that slow without explanation, new verification demands after a win, support that stops replying, sudden licence or domain changes, and terms rewritten around bonuses or redemptions. None proves a problem alone. Two or three together are a reason to withdraw what you can and stop depositing until the operator gives a clear answer.

Check the licence too. Our licence hub explains each regulator, and a seal that no longer resolves is worth a question to support. For games, provably fair checks test individual rounds, but they tell you nothing about solvency. Our rating method covers the wider picture.

What should I do if a crypto casino stops paying?

Save your evidence first: account screenshots, transaction hashes, support chats and the terms in force. Complain to the operator in writing, then use the route set by its licence. Keep crypto balances low at any casino, withdraw to a wallet you control, and expect a phishing wave after any data breach. Never pay a fee to release a withdrawal.

1. Screenshot your balance, pending withdrawal and bet history.
2. Download the terms and note the operator company.
3. Send a dated written complaint to support.
4. Follow the complaint route for that licence, as set out on our Anjouan and Curaçao pages.
5. Move remaining coins to a wallet you control.
6. Ignore anyone offering paid fund recovery: that offer is a common follow-on scam.

How is this tracker maintained?

A row enters this log only with a primary source or a reputable named outlet behind it. We read each source, copy amounts as reported, and keep competing figures side by side. Incidents we could not confirm stay out until a source appears. No totals are published, because many figures overlap or rest on one estimate alone.

Brand names here are not a verdict on whether to use a casino today. If a row looks wrong, tell us through our contact page and include a source. Gambling should stay affordable: our responsible gambling page lists tools and support.

Crypto casino hacks FAQ

What was the biggest crypto casino hack?

In this log the largest single casino theft is Stake, at $41 million in September 2023, attributed by the FBI to Lazarus Group. Alphapo, a payment processor rather than a casino, was estimated at $60 million by investigator ZachXBT, a figure that also includes losses suffered by CoinsPaid, so the two amounts overlap.

Has Stake been hacked?

Yes. About $41 million was taken around 4 September 2023, and the FBI attributed the theft to Lazarus Group. Stake’s co-founder said no user funds were compromised. Separately, a December 2025 report said Stake user data, including emails and phone numbers, was exposed through analytics supplier Mixpanel, with funds and passwords reported secure.

Was Gamdom hacked in 2026?

Yes. On 13 October 2026 its hot wallets were drained. Founder Felix Römer put the loss at just over $3 million, while on-chain analyst vxdb estimated about $4.2 million. Gamdom said user funds were safe and was reported back online on 16 October, though no independent balance check was published.

Are crypto casino deposits insured?

No source in this log shows any player deposit protected by an insurance or compensation scheme. Offshore licences such as Curaçao, Anjouan and Tobique do not guarantee balances. If a casino closes or fails, your position depends on its reserves and goodwill, so keep only what you are actively playing with on the site.

What happened to ZKasino?

Dutch prosecutors say a suspect was arrested on 29 April 2024 and a second person was reported arrested in the UAE in July 2025, in a suspected large-scale fraud case they describe as a rug pull. Investors were promised deposits back within 30 days, and prosecutors say that never happened. Suspects are presumed innocent until a court rules.

Can I get my crypto back after a casino closes?

Sometimes. Orderly closures such as Luck.io and BetHog published withdrawal routes or promised refunds, while FreeBitco.in users were still reporting no confirmed withdrawals in October 2026. Act on any closure notice at once, keep evidence, and contact the operator in writing. Be wary of paid recovery services.