A counterfeit network posing as GIWA, the blockchain being developed by Upbit, led users to send about 767.65 ETH into a fraudulent bridge before 766.25 ETH was transferred out in a single transaction. Decentralized exchange DYORSwap said it had mistaken the chain for GIWA's mainnet and added support for it, allowing 298 of the 1,335 depositing wallets to trade through the platform. The fake network used chain ID 9134, an RPC endpoint and a bridge, while GIWA's official Sepolia testnet uses chain ID 91342. CryptoSlate reported that the fraudulent network used the same chain ID as GIWA, while existing records identify 9134 as the counterfeit network's identifier. GIWA said its mainnet had not launched and rejected any suggestion that a mainnet RPC endpoint had leaked. DYORSwap said its own contracts were not compromised, has paid more than 200 ETH from its own funds to affected users, and is tracing the fake bridge deployer, initial funding and withdrawn assets. Earlier compensation terms offered 40% of cross-chain amounts for claims below 5 ETH, while larger claims required identity and address verification. Dunamu launched GIWA's Sepolia testnet in September 2025 using Optimism's OP Stack, and in April agreed with Hana Financial and POSCO International to test cross-border remittances using GIWA Chain-based infrastructure.