Gamdom Founder Disputes WhiteArmor’s Claim of Full User Database Theft

Gamdom founder Felix Römer has disputed WhiteArmor’s claim to have stolen the crypto casino’s entire user database, saying the company found no evidence of such an extraction during its investigation.

WhiteArmor listed Gamdom on its leak site on October 26 and demanded $15 million in bitcoin. The group claims to possess approximately 15.4 million account records containing 146 data fields and published a sample of 100 accounts as purported evidence. The sample has not been independently authenticated. 

Römer said the claimed account total did not match Gamdom’s actual user numbers. However, he stopped short of ruling out a smaller exposure and said the company would check whether the sample records were genuine.

Investigation Identified Fraudulent Withdrawal Requests

In the response supplied, Römer said investigators found that attackers had inserted withdrawal requests into Gamdom’s database to trigger payments from several accounts. He said the company corrected that vulnerability after the attack.

His current hypothesis is that the attackers may hold information relating to a few hundred accounts used to test withdrawals during the earlier theft, rather than a complete customer database. That explanation remains provisional pending verification of the sample.

Römer also said Gamdom shut down its server following the incident to protect user information. He acknowledged that even a limited disclosure would be serious, given how close the attackers had come to sensitive systems.

Founder Clarifies Approximately $4.2 Million in Losses

Römer also expanded on the financial impact of the October attack. He said approximately $3 million had left Gamdom’s wallets, with around another $1 million stolen through systems holding private keys, bringing total losses to approximately $4.2 million.

That explanation addresses the difference between his initial disclosure of just over $3 million and blockchain investigator vxdb’s estimate of approximately $4.2 million. Those differing figures had featured in earlier reporting on the breach. 

Römer said the extortionists’ apparent knowledge suggested they were likely responsible for the original attack. This is his assessment, rather than independently established attribution.

Data Claims Remain Under Review

The founder rejected WhiteArmor’s allegations concerning Gamdom’s provably fair games as unsupported and said he was willing to discuss them.

He characterised the database claim as an attempt to use a potentially small collection of accounts to demand further payment. Römer promised another update, leaving the authenticity and scope of any account-data exposure unresolved.