DYORSWAP Compensates Over 200 ETH to Users Affected by the Fake GIWA Mainnet Incident

HuoXing Finance reports that on September 28, the multi-chain DEX DYORSWAP issued an official statement regarding the fake GIWA mainnet 9134 incident, clarifying that the DYORSWAP contract was not compromised; rather, the project and its users were affected by a fraudulent network impersonating the GIWA mainnet 9134. This fake network featured a bridge and batcher resembling OP Stack and was deployed on September 27, 2026, at 02:10:59 (UTC+8). Approximately 8.5 hours before deployment, the address received approximately 0.045 ETH from an address associated with ChangeHero. Just 39 blocks after the bridge went live, three deposits totaling 0.4 ETH entered simultaneously within the same second—two of which were the first outgoing transactions from their respective wallets. DYOR believes these addresses exhibit characteristics highly consistent with internal test wallets. Subsequently, the fake L2 began operating normally and submitted transaction batches to the Ethereum mainnet. Data shows that 1,335 addresses deposited approximately 767.65 ETH into the bridge, of which about 766.25 ETH was subsequently withdrawn. The withdrawal transactions occurred at Ethereum block 26067309. The DYOR team stated that it has already compensated affected users with over 200 ETH from its own funds and affirmed that the investigation is ongoing, including tracing the deployer, funding sources, test wallets, batcher infrastructure, and the destination of the withdrawn funds.