hack or exploit

DYORSWAP users tricked into sending 767 ETH to fake bridge contract

0Importance
closedStatus
2News media
3Pieces
Published
Updated
Since then
2 new reports

A fake GIWA bridge drew ETH from DYORSWAP users over the weekend, with the losses described at about $2 million. The deposits were sent to a spoofed bridge contract that later had the funds withdrawn and moved on.

Key claims & sources

✓
DYORSWAP was tricked into integrating a spoofed version of the GIWA chain over the weekend, and the losses were described at about $2 million.
✓
Users sent 767 ETH to a fake bridge contract, and the funds were later withdrawn by the scammers.
✓
The fake bridge was presented as if it were the mainnet for GIWA, and DYORSWAP initially treated it as the project’s real launch.
✓
The stolen ETH came from 1,335 wallets, and the proceeds were later moved into Tornado Cash.

What it means

DYORSWAP users who interacted with the bridge are the people most directly affected, because ETH they sent to the fake contract is described as having been taken. Anyone watching the GIWA launch or using the exchange would notice that the bridge activity tied to the chain was not the real mainnet path that had been presented.

In practice, a bridge that looked like GIWA’s mainnet launch was available to users and accepted deposits, but the ETH that went in was later withdrawn and moved on. What remains is the same basic user flow of connecting to a bridge, while the network identity attached to it was fraudulent.

Market reaction i

EthereumETH the event is about this asset
first headline
+0.9% 2 h before
-0.1% 4 h after
$2,687price at publication
12data points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 28 13:08
Protos scoop
Breaks the event: $352M and $2M
+8 h 18 m
Sep 28 21:26
Crypto Economy adds
Brings into the story: GIWA, with quotes
+1 d 18 h
Sep 30 07:41
The Crypto Guardian echo our clock
No new facts: scam, 000

Thefts of a similar size

WhenWhat happenedFigure
2 months ago Fetch.ai · Private key leakage incident $2M
3 months ago RRWallet · Weak Key Generation incident $2M
5 months ago Aztec Bridge · Bridge Logic Flaw incident $2M
11 months ago Rari Capital · Uninitialized proxy incident $2M
1.1 years ago NGP · Price manipulation incident $2M

4282 incidents stored · 748 were as large as this one or larger ($2M)