Scammers launched a fake GIWA mainnet, which DEX DYORSWAP mistakenly identified as legitimate and integrated into its infrastructure. Through a fraudulent cross-chain bridge, about 767.7 ETH was deposited, of which approximately 766.3 ETH (~$2 million) was stolen.

Scammers Used Chain ID 9134 for Credibility

To make the fake network appear authentic, the attackers used the official Chain ID 9134, which had been previously announced for GIWA.

1335 Addresses Deposited Funds via the Fake Bridge

Together with the fake network, a bridge was deployed through which 1335 addresses deposited around 767.7 ETH. Ultimately, about 766.3 ETH was withdrawn and stolen from the bridge.

DYORSWAP Allocated Over 200 ETH for Compensation

The DEX began compensating users for their losses using its own funds, transferring over 200 ETH, and continues its investigation. This was reported by DYORSWAP.

GIWA: Mainnet Not Launched, Circulating RPCs Are Fake

GIWA is a Layer 2 blockchain from South Korean crypto exchange Upbit. The project's official mainnet has not yet launched, but Chain ID 9134 has already been announced for it. The GIWA team confirmed that the currently circulating "mainnet" RPCs are fake.