DYORSWAP says fake GIWA incident was a scam network, with about 766 ETH moved out and over 200 ETH repaid

DYORSWAP said in an official statement that the so-called GIWA mainnet 9134 incident was not caused by a vulnerability in the DYOR contract. Instead, the team said the losses were tied to a fraudulent network impersonating GIWA Chain 9134. According to the statement, the network had a bridge and batcher resembling OP Stack infrastructure and was deployed at 02:10:59 on Sept. 27, 2026, UTC+8. Roughly 8.5 hours before deployment, the address received about 0.045 ETH from an address linked to ChangeHero. On-chain data cited by DYORSWAP shows that 1,335 addresses bridged in about 767.65 ETH in total, and around 766.25 ETH was ultimately transferred out through the cross-chain bridge. DYORSWAP also said it has already used its own funds to compensate affected users with more than 200 ETH. The team added that it is still tracing the bridge deployer, the source of funds, early test wallets, and the later movement of the transferred assets.