Scammers convinced DYORSWAP to integrate a fake version of the upcoming GIWA blockchain, making it look legitimate to users. More than 1,300 wallets then sent roughly 767 ETH (about $2M) to a spoofed bridge contract, which was quickly drained and routed through Tornado Cash.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine DYORSWAP showing: “GIWA mainnet is live, bridge now to get in early.” Over 1,300 wallets believed that. But DYORSWAP later admitted that GIWA mainnet was fake. Scammers spun up a spoofed GIWA chain, even copied the real chain ID 9134, and got it integrated so users sent 767 ETH straight into their fake bridge contract. Here’s the trap: everything looked right. GIWA name, GIWA logo, chain ID 9134. FOMO did the rest, “bridge now to be early”, and twelve hours after deployment, the fake bridge was drained and funds pushed through Tornado Cash. Your move: if a new chain or bridge claims to be live, pause. Before you bridge a single token, go to the project’s official website or verified accounts and confirm the launch and the exact bridge address yourself.
U.S. prosecutors indicted six people over a Madagascar-based scam operation that allegedly stole more than $516,000 from U.S. victims. The group reportedly used dating sites, posed as attractive women, and persuaded victims to connect cryptocurrency wallets to fraudulent NFT websites, then…
The article describes a common fraud pattern where scammers impersonate police, government officials, or other trusted authorities over the phone to pressure victims into paying via a Bitcoin/crypto ATM. The victim is told their money is at risk, instructed to withdraw cash, and then directed to…
Microsoft says it uncovered and disrupted an underground marketplace (“YAM Store”) that sold phishing kits and access to cloud accounts, enabling massive global phishing and SMS scam campaigns. The operation allegedly supported over a billion scam messages since January 2026 and targeted 75,000+…
Three men were indicted for allegedly using AI-generated video and voice impersonations of CEOs and law-firm attorneys to steal $129 million. They targeted employees authorized to make wire transfers, framed payments as confidential acquisitions, and pressured staff to keep the transactions secret.…
Following a Revolut data breach, scammers sent text messages that appeared to come from the same message thread as legitimate Revolut texts. The texts pushed victims to click a link for a fake identity “liveness check,” request camera access, and then capture passwords, information that could be…
A person posing as a government agency used an email address on that agency’s real domain to obtain sensitive customer records from Revolut. The same weekly roundup also describes a fake antivirus renewal web page impersonating Avast, telling victims their subscription renewed for €129.99 and…
