Scammers convinced DYORSWAP to integrate a fake version of the upcoming GIWA blockchain, making it look legitimate to users. More than 1,300 wallets then sent roughly 767 ETH (about $2M) to a spoofed bridge contract, which was quickly drained and routed through Tornado Cash.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine DYORSWAP showing: “GIWA mainnet is live, bridge now to get in early.” Over 1,300 wallets believed that. But DYORSWAP later admitted that GIWA mainnet was fake. Scammers spun up a spoofed GIWA chain, even copied the real chain ID 9134, and got it integrated so users sent 767 ETH straight into their fake bridge contract. Here’s the trap: everything looked right. GIWA name, GIWA logo, chain ID 9134. FOMO did the rest, “bridge now to be early”, and twelve hours after deployment, the fake bridge was drained and funds pushed through Tornado Cash. Your move: if a new chain or bridge claims to be live, pause. Before you bridge a single token, go to the project’s official website or verified accounts and confirm the launch and the exact bridge address yourself.
The article describes a common fraud pattern where scammers impersonate police, government officials, or other trusted authorities over the phone to pressure victims into paying via a Bitcoin/crypto ATM. The victim is told their money is at risk, instructed to withdraw cash, and then directed to…
Following a Revolut data breach, scammers sent text messages that appeared to come from the same message thread as legitimate Revolut texts. The texts pushed victims to click a link for a fake identity “liveness check,” request camera access, and then capture passwords, information that could be…
A person posing as a government agency used an email address on that agency’s real domain to obtain sensitive customer records from Revolut. The same weekly roundup also describes a fake antivirus renewal web page impersonating Avast, telling victims their subscription renewed for €129.99 and…
The article describes multiple real-world social engineering operations this week, including phishing sent from a legitimate Trezor newsletter channel and malware pushed through a verified HBO Max Reddit ad account. It also highlights a large-scale network of fake online stores impersonating real…
Days after Revolut disclosed that customer records were shared with an unauthorized party, some customers reported receiving phishing texts that appeared in the same SMS thread as real Revolut messages. The link led to a fake site that asked for camera access to mimic Revolut’s identity “liveness”…
Apollo Global Management disclosed a data breach after attackers used social engineering to gain unauthorized access to certain cloud platforms over several days in July. The attackers obtained sensitive personal data (including Social Security numbers), highlighting how stolen credentials and…
