According to CoinMeta, dyorswap issued a statement claiming that the false giwa incident was caused by a fraudulent network. This network was deployed on September 27, 2026, at 02:10:59 (UTC +8), and before deployment, it received approximately 0.045 units of ETH from the changehero address. A total of 1335 addresses transferred approximately 767.65 units of ETH to it, of which about 766.25 units were subsequently transferred away. dyorswap has used its own funds to compensate affected users with over 200 units of ETH and is currently tracking the flow of these funds.