Skip to content
Latest alertgo-ethereum v1.17.8 security release fixes p2p DoS issues and a STUN-response node crash
0xCERT
All advisories
High0xCERT-2026-0149·

Fake GIWA Bridge social-engineering incident — $2.1M lost on Ethereum

Fake GIWA Bridge lost an estimated $2.1M on Ethereum (impersonation scam), according to the DeFiLlama hacks database. Users and integrators should review exposure and follow the project's official channels.

Vuln-watch · relayed from the DeFiLlama hacks database; see Source & attribution below

Affected chainsEthereum

Summary

Fake GIWA Bridge lost an estimated $2.1M on Ethereum (impersonation scam), according to the DeFiLlama hacks database. Users and integrators should review exposure and follow the project's official channels.

Incident

  • Protocol: Fake GIWA Bridge
  • Date (UTC): 2026-09-27
  • Estimated loss: $2.1M
  • Chain(s): Ethereum
  • Technique: Impersonation Scam
  • Classification: Social Engineering
  • Target: DeFi Protocol
  • Bridge incident: yes

Recommended actions

  • Revoke any token approvals granted to Fake GIWA Bridge contracts
  • Treat associated tokens, contracts, and websites as malicious; do not interact
  • Beware of follow-on phishing: ignore unofficial "refund", "recovery", or "claim" links and DMs; use the project's verified channels only

Source & attribution

This 0xCERT advisory relays an incident recorded in the DeFiLlama hacks database (https://defillama.com/hacks). Figures are preliminary estimates and may be revised; refer to the project's own post-mortem for the authoritative record. Report additional details to 0xCERT at https://www.0xcert.com/report.

OpenPGP-signed. The signed text of this advisory verifies against the 0xCERT key CCC7 D9EC 9415 723D.

Published 2026-09-27 · last updated 2026-10-08

curl -s https://www.0xcert.com/pgp.asc | gpg --import && curl -s https://www.0xcert.com/advisory/0xCERT-2026-0149/signed.txt | gpg --verify