Scammers created a fake version of the GIWA blockchain, tricking 1,333 wallets into depositing 767 Ethereum (worth approximately $2 million), which was then almost entirely stolen. The fake network impersonated GIWA's anticipated Ethereum Layer 2 mainnet and even used Chain ID 9134, which is associated with the planned launch. On-chain data shows that the attackers began preparations on September 26 and, after users deposited funds, changed the cross-chain bridge code, stealing 766 ETH in a single transaction. The DYORSWAP project has offered 40% compensation to victims who deposited less than 5 ETH, while claims involving larger amounts require individual verification. The GIWA blockchain was developed by Dunamu, the operator of Upbit, South Korea's largest cryptocurrency exchange.