Skip to content
Decentralized Casinos

Checked

All pages

What went wrong: BetSwirl, ZKasino, Stake and what each one teaches

Compare · incidents

Three events show the three ways money gets lost around crypto casinos: a platform quietly winding down, a bridge that only worked one way, and an operator's hot wallet being emptied. Each one maps onto one of our checks.

Nobody writes guides about the platform that ran quietly for five years and paid everyone. The failures are where the checks on this site come from, so here are three, told from the sources, with the check that would have warned you.

BetSwirl: the app went, the contracts stayed

betswirl.com showing a registrar page saying the domain is expired
What betswirl.com showed on 18 September 2026: a registrar's expired-domain page. The contracts are still on-chain; the last Dice bets we found were in March 2026.

BetSwirl was about as decentralized as a casino gets. Dice, coin toss, roulette, keno, wheel and plinko ran in their own contracts on Arbitrum, Avalanche, Polygon, BNB Chain and Base. Each chain had a shared bank contract, and every roll used Chainlink VRF. You played from your own wallet.

On 18 September 2026 betswirl.com, its www address and its docs all showed a registrar's “This domain is expired” page. The domain record showed a renewal two days earlier, but the site was still parked. On the explorers, the last Dice bets we found were on 20 March 2026 on Arbitrum and Polygon and on 22 March on Base. On 11 May 2026 the operator called the function that withdraws VRF fees from the Dice contract on Base, Arbitrum and Polygon. We found no announcement.

What it teaches. Self-custody did its job: players who held funds in their own wallets simply had nothing more to do there. What they lost was the front-end and any unfinished bet. The check that matters here is who holds the money. The second lesson is practical: a platform's liveness isn't in its contracts. Look at the latest bets on the explorer before you use it.

ZKasino: a bridge that only went one way

The ZKasino landing page
The ZKasino page still presents a "Layer 2 for on-chain gaming". In April 2024 about $33M of users' bridged ETH was converted to its token and sent to Lido.

ZKasino promoted its own layer 2 for on-chain gaming and asked users to bridge ETH to it ahead of launch. More than 10,000 users deposited about $33M worth of ether to earn its ZKAS token. In April 2024 that ETH was converted into ZKAS and sent to Lido, as CoinDesk reported on 22 April. Users who expected their ETH back got the project's token instead. On 29 May 2024 CoinDesk reported that ZKasino was giving users 72 hours to retrieve their ether.

What it teaches. The problem wasn't a contract bug. It was a bridge into a chain the project controlled, with an exit that depended on the project's decisions. Audits wouldn't have caught it. The questions that would: how do I get out, and does leaving depend on the team? We ask both in the “five questions” on the decentralized casinos ranking. Any casino that needs you to bridge to its own chain first deserves extra caution.

Stake: $41M from the hot wallets

FBI press release on the theft of $41 million from Stake.com
The FBI release of 6 September 2023: about $41M stolen from Stake on or about 4 September, attributed to Lazarus Group. The losses were Stake's hot wallets, which is what custody means in practice.

On or about 4 September 2023, about $41M in virtual currency was taken from Stake. The FBI confirmed the theft in a press release on 6 September and attributed it to Lazarus Group, the North Korean hacking group also tracked as APT38. The funds were taken from Ethereum, BNB Smart Chain and Polygon.

What it teaches. This is custodial risk at its plainest. A casino that holds player balances holds them in wallets whose keys it controls; if those keys are compromised, the loss is the operator's first. How that lands on players depends on the operator's reserves and choices, not on anything the player controls. Stake is not a decentralized casino and doesn't claim to be. It is here because it shows why the custody check comes first. The side-by-side is on decentralized vs custodial.

Projects that are simply gone

Older lists still include names that no longer lead anywhere. Chancer, still listed on some pages as an on-chain betting project, shows a website-builder placeholder on its domain. degen.bet is a parked domain for sale. Neither has anything left to check, which is itself the answer.

A checklist from the incidents

The full set of habits is on safe play on-chain.

Questions and answers

What happened to BetSwirl?
On 18.09.2026 betswirl.com showed a registrar's expired-domain page. The last Dice bets we found on-chain were on 20–22 March 2026, and the VRF fees were withdrawn from the Dice contract on three chains on 11 May 2026. We found no statement from the team.
What happened at ZKasino?
More than 10,000 users bridged about $33M of ETH to ZKasino's chain. In April 2024 that ETH was converted into the ZKAS token and sent to Lido, according to CoinDesk. In May 2024 the project opened a 72-hour window for users to take ETH back.
Was the Stake hack a decentralized casino hack?
No. It was a theft from Stake's own hot wallets, about $41M on or about 4 September 2023, attributed by the FBI to Lazarus Group. It is an example of custodial risk.
By
The Decentralized Casinos desk
Desk
Contracts, docs and terms of on-chain betting platforms
Checked
18 September 2026