A fraudulent bridge masquerading as infrastructure for GIWA—an Ethereum layer-2 network built by Dunamu, the operator behind Upbit—siphoned roughly $2 million in Ether after DYORSWAP, a decentralised exchange, mistakenly treated it as legitimate mainnet architecture.
DYORSWAP published a post‑incident breakdown Monday showing that 1,335 addresses deposited approximately 767.65 ETH into the counterfeit bridge. Attackers drained 766.25 ETH.
On Sunday GIWA issued a statement confirming that no mainnet exists and that circulating connection parameters are fraudulent. Dunamu brought GIWA's Sepolia testnet online in September 2025, built on Optimism's OP Stack. Separately, an April agreement between Dunamu, Hana Financial and POSCO International outlined plans to pilot a GIWA Chain remittance platform using live trade flows.
DYORSWAP confirmed that its own contracts remain intact. The platform is now tracking the bridge deployer, funding wallets, suspected test accounts and destination addresses. DYORSWAP has already distributed more than 200 ETH to affected users, drawing the compensation from its own reserves.
Hot Stories
- Articles How Open-Weight AI Helps Hackers Find Code Vulnerabilities
- Investigations iOS app FomoPeek stole $579K in USDT via kernel exploits
- News Bitget confirms $351.6 million hack
- Investigations How AI Is Changing Attacks on Crypto Services
- News Bitget: reports of a possible $170M hack
- Investigations White-hat hackers exploit Liquid Network flaw to steal $320M BTC
- Investigations Symbiosis Recovers 15 BTC After Bitcoin Bridge Exploit
- Investigations Blockstream rejects ransom demand after $320M Liquid hack
- Investigations OFAC and DOJ Freeze $52M in Xinbi Crypto Laundering Network
- Investigations OFAC sanctions Shelbit and affiliates for $6.3B crypto flows