Fake Ethereum Layer-2 networks are on the rise, mimicking legitimate projects, websites, RPCs, and bridges to deceive users. Scammers build convincing infrastructure that looks authentic, then lure victims into bridging real ETH into a fraudulent network. The fake bridge accepts deposits while the promised Layer-2 never actually exists.
One recent case, the fake GIWA network, reportedly attracted about 767 ETH from around 1,335 addresses. Eventually, approximately 766 ETH was drained from the bridge. A familiar Chain ID does not guarantee a network is genuine. For instance, the GIWA scam used Chain ID 9134 even though the official mainnet had not yet launched.
A working RPC, successful transactions, or a functioning blockchain also cannot confirm who controls the network. Attackers can create all the infrastructure needed to appear real. Watch for unofficial “mainnet live” announcements, unknown RPC links, newly created bridge websites, urgent deposit requests, and networks missing from the official project documentation.
Before bridging, verify the Layer-2’s official website, launch status, Chain ID, RPC URL, bridge contract, block explorer, and contract addresses. Ethereum’s security guidance recommends carefully checking network information before using any bridge. Additionally, never grant a smart contract unlimited spending access when a smaller limit is possible. Set spending limits to only the amount required.
Already connected to a suspicious bridge? Stop interacting immediately, revoke unnecessary token approvals, move remaining funds to a clean wallet if needed, save all transaction details, and ignore anyone promising guaranteed crypto recovery.