-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0149
============================================================

Advisory-ID:  0xCERT-2026-0149
Severity:     High
Published:    2026-09-27T00:00:00.000Z
Updated:      2026-10-08T22:51:22.136Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0149

Title: Fake GIWA Bridge social-engineering incident — $2.1M lost on Ethereum

Summary
- -------
Fake GIWA Bridge lost an estimated $2.1M on Ethereum (impersonation scam), according to the DeFiLlama hacks database. Users and integrators should review exposure and follow the project's official channels.

Details
- -------
Summary
Fake GIWA Bridge lost an estimated $2.1M on Ethereum (impersonation scam), according to the DeFiLlama hacks database. Users and integrators should review exposure and follow the project's official channels.

Incident
- - Protocol: Fake GIWA Bridge
- - Date (UTC): 2026-09-27
- - Estimated loss: $2.1M
- - Chain(s): Ethereum
- - Technique: Impersonation Scam
- - Classification: Social Engineering
- - Target: DeFi Protocol
- - Bridge incident: yes

Recommended actions
- - Revoke any token approvals granted to Fake GIWA Bridge contracts
- - Treat associated tokens, contracts, and websites as malicious; do not interact
- - Beware of follow-on phishing: ignore unofficial "refund", "recovery", or "claim" links and DMs; use the project's verified channels only

Source & attribution
This 0xCERT advisory relays an incident recorded in the DeFiLlama hacks database (https://defillama.com/hacks). Figures are preliminary estimates and may be revised; refer to the project's own post-mortem for the authoritative record. Report additional details to 0xCERT at https://www.0xcert.com/report.

References
- ----------
- - https://defillama.com/hacks
- - https://www.blockchainbreaches.com/en/breaches/fake-giwa-2026

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrIhGoJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmcOnZ9BElvL4odD/JMkq6fxXYKUAGNN58lZ9qwj
HU9Y7xYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAAB1BAEAkfKIk4iHZQyInZ/c
QN9ojYMEdPNTrarATgdwQthR5XEBAO16w3Sn7nF1+xmDEiCRHr5BL9YFsqLk
4NPE0SQFJaQI
=VbK7
-----END PGP SIGNATURE-----