DYORSWAP said the incident involving GIWA Chain 9134 was caused by a fraudulent network impersonating the project, rather than a vulnerability in DYOR’s contract. The network included an OP Stack-style bridge and batcher (software that groups transactions) and was deployed on Sept. 27, 2026, at 02:10:59 UTC+8. A total of 1,335 addresses bridged about 767.65 ETH into the network, while approximately 766.25 ETH was later removed through its cross-chain bridge (a system moving assets between blockchains). DYORSWAP said it has used its own funds to compensate affected users with more than 200 ETH and continues tracking the bridge deployer, funding sources, early test wallets and the subsequent movement of the transferred funds.