Scammers trick DYORSWAP users into sending 767 ETH to fake bridge

Scammers tricked DYORSWAP into integrating a spoofed version of the upcoming GIWA blockchain over the weekend. More than 1,000 DYORSWAP users sent a total of 767 ETH to the fake bridge contract. The losses totaled $2 million. Scammers withdrew the funds before funneling the proceeds into Tornado Cash. DYORSWAP later said the supposed GIWA Mainnet it had identified was a fake chain set up by scammers. The fake chain used the same chain ID, 9134, as the legitimate GIWA network. This made it appear legitimate during DYORSWAP's initial verification. DYORSWAP's statement cited specific suspicious messages that may have spread false information within its community. The spoofed bridge was deployed shortly after 6 PM UTC on Saturday. Scammers drained it just over 12 hours later. DYORSWAP offered users who had bridged less than five ETH a 40% refund. DYORSWAP said it would consider addresses above that threshold on a case-by-case basis. GIWA's official X account debunked the existence of its mainnet minutes before the fake bridge contract was emptied. In a later update, DYORSWAP identified addresses that it believed were behind the scam based on timing and behavior. DYORSWAP said those addresses were funded from Binance and Gate. The update counted 1,335 addresses that had bridged a total of 767.65 ETH. Almost all of that amount was later drained. DYORSWAP said it had distributed over 200 ETH in compensation. An address claiming to be from the DYORSWAP team contacted the scammers on-chain and requested the return of the stolen funds.