A fraudulent bridge masquerading as infrastructure for GIWA—an Ethereum layer-2 network built by Dunamu, the operator behind Upbit—siphoned roughly $2 million in Ether after DYORSWAP, a decentralised exchange, mistakenly treated it as legitimate mainnet architecture.
DYORSWAP published a post‑incident breakdown Monday showing that 1,335 addresses deposited approximately 767.65 ETH into the counterfeit bridge. Attackers drained 766.25 ETH.
On Sunday GIWA issued a statement confirming that no mainnet exists and that circulating connection parameters are fraudulent. Dunamu brought GIWA's Sepolia testnet online in September 2025, built on Optimism's OP Stack. Separately, an April agreement between Dunamu, Hana Financial and POSCO International outlined plans to pilot a GIWA Chain remittance platform using live trade flows.
DYORSWAP confirmed that its own contracts remain intact. The platform is now tracking the bridge deployer, funding wallets, suspected test accounts and destination addresses. DYORSWAP has already distributed more than 200 ETH to affected users, drawing the compensation from its own reserves.
Hot Stories
- Investigations BitMart loses $391,000 amid staffing and security challenges
- Investigations zkLink suffers $783,000 loss due to cross-chain message exploit
- News FBI links Binance theft to North Korea
- News Chainalysis discloses access to customer data
- News Binance says it reserved $6.34B after the hack
- Investigations Chainalysis uses AI to track $387M stolen from Bitget
- News Binance reports $6.3B security incident
- Investigations Cysic Bridge Hacker Routed $744K to Tornado Cash After 10% Bounty
- Investigations Drift exploit hackers moved $109M ETH to Tornado Cash mixer
- News Crypto incidents cost $1.18B in Q3 2026, mostly supplier flaws
