DyorSwap said a fake GIWA mainnet, created by scammers, used the legitimate chain ID 9134 and appeared valid during initial checks. The exchange said significant losses occurred through a fraudulent cross-chain bridge (tool for moving assets between networks). It is tracing addresses, transactions and fund flows with specialist security support, preserving evidence and preparing possible treasury compensation. Users have been told to avoid unofficial GIWA RPC endpoints (interfaces for accessing blockchain nodes), bridges, contracts and related addresses until further notice.