Degen Coin Flip pauses Spin and side bets after reporting a $10,000 house loss
Degen Coin Flip says an exploit involving over 30,000 wallets cost its house about $10,000. It paused Degen Spin and side bets, says other games are unaffected and that player funds remain safe. The project has not published a root cause or verified fixed deployment.
- Disclosed
- Nov 6, 2026
- Public disclosure date
- Severity
- Septic Tank Blew
- No CVE: a breach, not a bug
- Splash zone
- Degen Spin and side bets; the project attributes the approximately $10,000 loss to its house, not player balances.
- Degen Coin Flip · Solana · Exploit
- In the wild
- Yes
- The project confirms an exploited game flaw; the loss and wallet count are its estimates.
What happened
The project confirms an exploit in Degen Spin and says it paused Spin and side bets while working on a fix. Its approximately $10,000 loss and more-than-30,000-wallet count come from the operator, not an independent loss reconstruction. Wallets are not a count of distinct attackers, affected people or victims. The statement says the damage was borne by the house, players use their own wallets, and other games are unaffected. It does not establish a platform-wide wallet compromise or stolen player balances.
L4 reflects confirmed active exploitation despite the limited reported house loss. The original disclosure does not explain the vulnerable logic, whether it is on-chain or off-chain, the full attack period, or an independently verified fixed deployment. The linked October 28 transaction is a funding reference, not proof of an attack starting that day. A Coinbase-labelled funding source does not establish an exchange compromise or responsibility for the exploit.
Crime-scene timeline
Nov 6, 04:04 UTC
Project discloses the exploit and pauses affected games
The original post reports over 30,000 wallets and about $10,000 of house losses; Spin and side bets are paused while a fix is developed.
Nov 6, 04:29 UTC
Project shares funding and collection references
A follow-up links a funding wallet, a collecting wallet and an October 28 funding transaction. That date does not establish when exploitation began.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- Degen Coin Flip original incident disclosurePrimaryRead in a public browser; project reports the exploited Spin feature, more than 30,000 wallets, about $10,000 house loss, affected-game pause and its player-funds assurance.
- Degen Coin Flip original funding-reference follow-upPrimaryRead in the public conversation; identifies funding/collection references and an October 28 funding transaction. It does not establish a Coinbase security breach or the exploit start date.