Fake GIWA Ethereum Layer 2 Drains 766 ETH From Crypto Traders
The network used Chain ID 9134 and a bridge modeled on OP Stack infrastructure. DYORSWAP has distributed more than 200 ETH to affected users.
A fake GIWA-branded Ethereum layer-2 network drained about 766.25 Ether (ETH) after 1,335 addresses deposited roughly 767.65 ETH into a fake bridge, exposing a scheme built around an unreleased mainnet.
The network launched Sept. 26 at 2:10:59 p.m. ET (18:10:59 UTC) using Chain ID 9134 and infrastructure modeled on OP Stack systems, including a bridge and batcher. The draining transaction was recorded at Ethereum block 26,067,309.
DYORSWAP said it has distributed more than 200 ETH from its own funds to affected users while tracing the network’s operators, funding sources, infrastructure and the destinations of the transferred funds.
GIWA said its legitimate mainnet was not live, despite online claims that mainnet RPC information had become available. Its documentation lists the mainnet as under development and provides contract information for its Sepolia testnet.
The incident involved a functioning fake network and bridge, rather than a reported exploit of DYORSWAP’s smart contracts. The identities of the operators and the final recovery amount have not been established.
