Losses from the Gamdom exploit now stand at $4.2 million, exceeding the $3 million initially estimated by the security firm that first flagged the incident.

The revised figure represents a 40% increase over the original assessment and marks one of the larger breaches at a centralized gambling platform this year. Gamdom, a crypto casino and betting operator, has not disputed the updated loss total.

What does the revised figure change?

The gap between the two numbers illustrates how preliminary incident estimates can undershoot final on-chain totals. Security firms typically trace exploited wallets in the hours after an attack, when transactions are still settling across addresses. Final accounting, once attackers consolidate funds, frequently produces a higher sum.

For Gamdom, the difference of roughly $1.2 million matters for at least two reasons. First, it defines the scale of any reimbursement obligation to affected users. Second, it shapes how insurers and payment partners size the operational damage.

How did the estimate move?

The unnamed security firm behind the original report set losses at $3 million shortly after the exploit surfaced. Subsequent blockchain analysis, which tracks drained wallets and consolidation addresses, lifted the total to $4.2 million.

This pattern matches previous exploits. Initial figures often cover only the first batch of drained transactions. Later transfers, executed after monitoring slows, add to the final count.

Why centralized platforms carry the exposure

Gamdom operates as a centralized casino, meaning it custodies user deposits directly rather than through on-chain smart contracts. When an attacker breaches such a platform, the loss lands on the operator's own wallets rather than on a protocol's liquidity pools.

That structure cuts both ways. Users of decentralized protocols face smart-contract risk; users of centralized operators depend entirely on the firm's treasury and its willingness to make customers whole. A $4.2 million drain tests both the balance sheet and the disclosure practices.

What comes next

The attack window remains under review. Affected parties and analysts will watch whether Gamdom publishes a post-mortem, reimburses the full $4.2 million, or routes the case to law enforcement. Until the operator confirms its remediation plan, the revised total stands as the operative measure of the breach.

Tom Whitfield is a reporter at Mempool Brief covering security incidents and on-chain forensics.