DYORSWAP users tricked into sending 767 ETH to fake bridge contract
- Published
- Updated
A fake GIWA bridge drew ETH from DYORSWAP users over the weekend, with the losses described at about $2 million. The deposits were sent to a spoofed bridge contract that later had the funds withdrawn and moved on.
Key claims & sources
What it means
DYORSWAP users who interacted with the bridge are the people most directly affected, because ETH they sent to the fake contract is described as having been taken. Anyone watching the GIWA launch or using the exchange would notice that the bridge activity tied to the chain was not the real mainnet path that had been presented.
In practice, a bridge that looked like GIWA’s mainnet launch was available to users and accepted deposits, but the ETH that went in was later withdrawn and moved on. What remains is the same basic user flow of connecting to a bridge, while the network identity attached to it was fraudulent.
Market reaction i
Ethereum fell 0.1% in the 4 hours after the first headline, after rising 0.9% in the 2 hours before.
49 prices, one every 30 minutes · The move was larger before the first headline than after: an observation, not an explanation. The market also moves on things nobody publishes.
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 2 months ago | Fetch.ai · Private key leakage incident | $2M |
| 3 months ago | RRWallet · Weak Key Generation incident | $2M |
| 5 months ago | Aztec Bridge · Bridge Logic Flaw incident | $2M |
| 11 months ago | Rari Capital · Uninitialized proxy incident | $2M |
| 1.1 years ago | NGP · Price manipulation incident | $2M |
4285 incidents stored · 748 were as large as this one or larger ($2M)