{"investigation":{"slug":"sportsbet","entity_name":"Sportsbet","trust_score":6,"severity_base":null,"score_modifier":0,"confidence":1,"status":"published","content_type":"investigation","summary":"Sportsbet.io is a cryptocurrency gambling and sports betting platform operated by mBet Solutions N.V. under the Yolo Group umbrella, licensed in Curaçao. On June 22, 2024, blockchain investigator ZachXBT publicly identified that the platform's hot wallets were drained of approximately $3.5 million in USDT and TRX, attributing the attack to the same threat actor who hours later stole an estimated $55 million from Turkish exchange BtcTurk, with stolen funds allegedly commingled between both hacks. The platform has drawn ongoing scrutiny for operating in regulatory grey markets, serving users in jurisdictions where it holds no local license, and for systemic user complaints involving account closures and fund seizures following wins. Yolo Group founder Tim Heath confirmed in 2025 that the brand is being wound down in favor of fully regulated markets.","sections":[{"content":"On June 22, 2024, on-chain investigator ZachXBT published findings via his Telegram channel stating that Sportsbet.io had been 'likely hacked for $3.5M+ by the same threat actor as BTCTurk two hours before as funds from the thefts comingled.' The stolen assets consisted of USDT (Tether) and TRX (Tron's native token), extracted from the platform's hot wallets. Sportsbet.io made no public disclosure of the incident at the time of ZachXBT's report. The June 2024 BtcTurk breach involved the compromise of private keys across ten hot wallets, resulting in the theft of an estimated $55 million across multiple token types; Binance subsequently froze approximately $5.3 million of those stolen assets. ZachXBT's on-chain analysis identified overlapping fund flows between the Sportsbet.io hot wallet drain and the BtcTurk attack, suggesting a single coordinated threat actor. Sportsbet.io's failure to publicly disclose the incident raised transparency concerns among security researchers. A second, unrelated BtcTurk breach occurred in August 2025, draining an estimated $51.7 million across seven blockchains using a similar private key compromise vector.","heading":"Hot Wallet Hack and BtcTurk Connection (June 2024)","sources":[],"severity":"medium"},{"content":"Sportsbet.io has been categorized by ZachXBT and community researchers as a platform with elevated money laundering risk due to its no-KYC deposit model. The platform formally allows deposits without identity verification up to certain thresholds, with enhanced checks triggered at higher amounts (notably from approximately 2,500 EUR equivalent). This structure has been cited as creating a pathway for illicit funds to enter the gambling ecosystem without traceability. The platform's AML policy, published by operator mBet Solutions N.V., states a commitment to preventing financial crime; however, the policy operates under Curaçao's regulatory framework, which has historically been criticized for weak enforcement compared to EU-regulated jurisdictions. The use of TRON and USDT as primary deposit and withdrawal assets is notable given ZachXBT's broader documented findings that TRON's low-fee infrastructure has become a preferred rail for what underground markets term 'Black U' laundering — an estimated $5–10 billion in illicit USDT flows documented through TRON-based channels. No specific regulatory enforcement action against Sportsbet.io or mBet Solutions N.V. for money laundering violations has been publicly confirmed as of May 2026.","heading":"Money Laundering Concerns and No-KYC Operations","sources":[],"severity":"medium"},{"content":"Sportsbet.io is operated by mBet Solutions N.V., a company registered in Curaçao and part of the Yolo Group (formerly The Coingaming Group, rebranded in 2021). The Yolo Group was founded by Tim Heath, an Estonian-based entrepreneur, who launched Bitcasino.io in 2013 as one of the first licensed Bitcoin casinos, and subsequently launched Sportsbet.io. At their peak, Yolo Group brands reportedly generated approximately 100 million EUR in annual EBITDA. In September 2025, Tim Heath publicly confirmed that Yolo Group was pivoting away from Curaçao-licensed grey market operations, pursuing B2B gaming vendor licenses in the United Arab Emirates and targeting regulated EU markets including Canada, Sweden, Finland, Spain, and Estonia under the MiCA framework. Heath acknowledged that the group no longer viewed grey market activity as sustainable. As of early 2026, reports indicated that major operator Betsson was evaluating a potential acquisition of Sportsbet.io from Yolo Group. The wind-down of Sportsbet.io and Bitcasino.io resulted in approximately 300 redundancies in Estonia alone.","heading":"Corporate Structure: Yolo Group and mBet Solutions N.V.","sources":[],"severity":"medium"},{"content":"In October 2020, the Swiss Federal Casino Commission (ESBK) added Sportsbet.io (then operating under The Coingaming Group) to its blacklist of unlicensed foreign gambling operators, requiring Swiss ISPs to block DNS access to the platform. Bitcasino.io, the sister brand under the same corporate group, was similarly blocked by Swiss authorities in August 2020. The blacklisting was part of a broader ESBK action covering 36 entities and reflected Sportsbet.io's operation in jurisdictions where it held no local license. Sportsbet.io's Curaçao license (OGL/2023/110/0072) does not grant operating rights in most major regulated markets, including the United States, United Kingdom, and EU member states with local licensing requirements. The platform's model of accepting players from jurisdictions where its services are not locally licensed has been characterized by industry observers and Yolo Group's own founder as a 'grey market' approach. Curaçao implemented a regulatory overhaul under the National Gambling Ordinance (LOK) in December 2024, introducing stricter KYC/AML standards, but the platform's pending wind-down reduces the practical relevance of this framework for Sportsbet.io specifically.","heading":"Regulatory Blacklisting and Jurisdiction Concerns","sources":[],"severity":"medium"},{"content":"Sportsbet.io holds a rating of approximately 1.2 out of 5 stars on Trustpilot, with a high volume of negative reviews documenting a consistent pattern: accounts are restricted or closed following winning sessions, and funds are withheld under references to vague Terms and Conditions provisions. User-reported complaints include: unauthorized balance deductions applied retrospectively (in one documented case a deduction of over $1,000 was applied without prior notice); accounts being blocked after large withdrawal requests; and multi-round KYC processes that users allege are deployed as a stalling mechanism following wins rather than as standard compliance. Users in multiple reviews report depositing, winning, and then being unable to withdraw due to account restrictions. In a separate publicly documented case on BitcoinTalk, a user alleged that 3,224 ADA was confiscated without explanation. The platform's Curaçao license provides limited recourse for players in dispute resolution relative to EU-regulated alternatives, as Curaçao's dispute mechanisms have been broadly criticized for insufficient player protection.","heading":"User Complaints: Account Closures and Fund Seizures","sources":[],"severity":"medium"}],"timeline":[{"date":"2016","event":"Sportsbet.io launched by The Coingaming Group (later renamed Yolo Group), operated by mBet Solutions N.V. under a Curaçao license.","source":"","source_url":"https://www.bookmakers.bet/review/sportsbet-io/","date_original":"2016-01-01"},{"date":"2020-08","event":"Swiss Federal Casino Commission (ESBK) blacklists sister brand Bitcasino.io as an unlicensed foreign operator.","source":"","source_url":"https://www.gamblingnews.com/news/swiss-watchdog-suspends-access-to-coingamings-sportsbet-io/","date_original":"2020-08-01"},{"date":"2020-10-12","event":"ESBK adds Sportsbet.io to its blacklist of 36 foreign gambling domains, requiring Swiss ISPs to block access via DNS.","source":"","source_url":"https://www.gamblingnews.com/news/swiss-watchdog-suspends-access-to-coingamings-sportsbet-io/"},{"date":"2021","event":"The Coingaming Group rebrands as Yolo Group.","source":"","source_url":"https://tribuna.com/en/casino/news/2025-09-23-curacaolicensed-operator-sportsbetio-founder-mulls-shutting-down-or-selling-yolo-group/","date_original":"2021-01-01"},{"date":"2024-06-22","event":"ZachXBT publicly reports that Sportsbet.io was likely hacked for approximately $3.5 million in USDT and TRX, attributing the attack to the same threat actor responsible for the $55 million BtcTurk exchange hack hours later, with funds from both incidents found to be commingled on-chain. Sportsbet.io issues no public disclosure.","source":"","source_url":"https://www.web3isgoinggreat.com/?id=sportsbetio-hack"},{"date":"2024-06-22","event":"BtcTurk hack: approximately $55 million stolen from ten hot wallets via private key compromise. Binance freezes $5.3 million of stolen assets.","source":"","source_url":"https://www.theblock.co/post/301340/binance-freezes-5-million-in-funds-looted-from-btcturk-after-alleged-54-million-hack-of-turkish-exchange"},{"date":"2024-12-24","event":"Curaçao implements the new National Gambling Ordinance (LOK), replacing the 1993 Offshore Games Ordinance and introducing stricter KYC/AML requirements.","source":"","source_url":"https://coincub.com/blog/curacao-gaming-license/"},{"date":"2025-09-23","event":"Yolo Group founder Tim Heath publicly confirms pivot away from grey market Curaçao-licensed operations toward fully regulated markets, including UAE and EU. Sportsbet.io and Bitcasino.io announced as being phased out in favor of a consolidated Yolo.com brand.","source":"","source_url":"https://www.gaming.net/yolo-group-shift-towards-regulation-sportsbet-io-and-bitcasino-io-face-uncertain-future/"},{"date":"2025-08","event":"Second BtcTurk hack: $51.7 million stolen across seven blockchains using a similar private key compromise vector. Halborn security documents recurring failures.","source":"","source_url":"https://www.halborn.com/blog/post/explained-the-btcturk-hack-august-2025","date_original":"2025-08-01"},{"date":"2026-02-03","event":"Reports emerge that Betsson is evaluating a potential acquisition of Sportsbet.io from Yolo Group as the wind-down process continues.","source":"","source_url":"https://sbcnews.co.uk/sportsbook/2026/02/03/tim-heath-betsson-sportsbet-io/"}],"sources_used":[],"source_tags":["etherscan","zachxbt"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet","created_at":"2026-05-04T16:04:56.666865+00:00","updated_at":"2026-08-29T01:35:56.977+00:00"}}