Fake GIWA Bridge impersonation scam — operator/drain addresses
- Scam type: Phishing
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-14
- Last updated: 2026-10-16
Fake GIWA Bridge / fake GIWA mainnet (chain ID 9134) impersonation scam on 2026-09-26/27 drained ~766.25 ETH (~$2.07–2.1M) from users who bridged real ETH into a counterfeit OP-Stack portal. Per Blackpaper BP-1300 (https://blackpaper.wiki/incident/BP-1300/) and PublicAML on-chain investigation (https://publicaml.org/giwa-fake-bridge/), operators used a 2-of-2 Safe to atomically upgrade the portal, drain it, and restore the implementation. Drain tx: 0x1f3c0a2375a6f043a4f2473f822398587d9af5225e4dc1275ca0eeda67dc7306. GIWA mainnet was not live; this is an impersonation scam, not a compromise of…
Other addresses in this report: 0xccc2aecf5d24f0ea30cf81ec0dbec59f19ddcd10, 0x04a9c8d8fee491411bda28b68ad80f0122fc4134, 0xba9938c0b96a70e6479661b915e7e481fe435ab2, 0x119e68b59c44291f76324c76377b776d0b4dd38c