Security· ★★★★· bearish·

Swell admin keys possibly compromised, 2,500 ETH at risk

  • —Attacker raised swETH and rswETH NAV by up to 1% per hour without backing
  • —Four malicious upgrade contracts were deployed
  • —Potential losses estimated at about 2,500 ETH
  • —Contracts have not passed the multisig and are not queued for execution
Why it matters: If the upgrades clear the multisig, swETH and rswETH user funds are at risk, and the incident will test the resilience of Swell DAO's governance.
Source: PANews