A sophisticated scam involving a counterfeit version of the GIWA blockchain network has drained roughly $2 million in Ether, catching the decentralized exchange DYORSWAP off guard and prompting the platform to compensate affected users.
How the Scam Unfolded
Fraudsters created a fake GIWA network that successfully deceived DYORSWAP, the decentralized trading platform, into treating it as legitimate. By impersonating the yet-to-launch blockchain, the attackers were able to siphon off approximately $2 million worth of ETH before the deception was uncovered.
The incident highlights the growing risks facing DeFi platforms, where trust in emerging networks can be exploited by bad actors who move quickly to capitalize on anticipation surrounding high-profile projects.
Impersonating a blockchain that hadn't even gone live proved enough to drain millions from an unsuspecting exchange.
DYORSWAP Responds With Compensation
In the wake of the exploit, DYORSWAP moved to make its users whole, announcing it had paid out more than 200 ETH in compensation to those impacted by the fraudulent activity. The gesture aims to preserve confidence in the platform following the security lapse.
Meanwhile, the genuine GIWA project — associated with Dunamu, the operator behind South Korea's major exchange Upbit — issued a public warning clarifying that its mainnet had not yet launched. The statement was intended to distance the legitimate network from the scam and prevent further users from falling victim.
Key takeaways from the incident include:
- Scammers exploited the hype around GIWA before its official launch
- DYORSWAP reimbursed users with over 200 ETH
- GIWA's real operators confirmed the mainnet remains unreleased
A Warning for the Broader Market
The episode serves as a cautionary tale about verifying network authenticity before integrating or interacting with new blockchains. As anticipation builds around upcoming launches, scammers are increasingly likely to seize on the confusion, targeting both platforms and everyday users.
For the crypto community, the takeaway is clear: even well-known names attached to a project offer no guarantee against impersonation, and due diligence remains essential before committing funds.