I came across some important news this morning, so I wanted to share it.
The admin keys for Swell DAO’s swETH and rswETH may have been leaked. A security researcher says the attacker has already deployed four malicious upgrade contracts, which are raising the NAV without asset backing by up to 1% per hour. They haven’t been queued for multisig execution yet. If they go live, around 2,500 $ETH could be drained.
The key issue here isn’t the amount, in my view—it’s the permissions. The admin keys control the proxy administrator. Whoever has them can point the proxy to a malicious contract, giving them control over minting and withdrawals. It sounds like your own wallet has been stolen, but in reality, someone has taken the keys to the entire protocol’s wallet.
A few reminders—not financial advice:
1. If you’re still using LST-type assets, check the protocol’s official announcements and upgrade history regularly. Don’t focus only on the yield.
2. The multisig queue period isn’t just for show. It gives you time to react and get out.
3. Don’t rush in just because you see a discount. When the NAV is being inflated, what looks like a bargain may just be something someone made up.
A quick look at the market: $BTC is now around 82,818, basically flat over the past 24 hours and down a little over 2% from its early-morning high. News like this can easily stir up sentiment, but a single event won’t change the overall trend.
Keep an eye on your own positions. Don’t gamble.
The admin keys for Swell DAO’s swETH and rswETH may have been leaked. A security researcher says the attacker has already deployed four malicious upgrade contracts, which are raising the NAV without asset backing by up to 1% per hour. They haven’t been queued for multisig execution yet. If they go live, around 2,500 $ETH could be drained.
The key issue here isn’t the amount, in my view—it’s the permissions. The admin keys control the proxy administrator. Whoever has them can point the proxy to a malicious contract, giving them control over minting and withdrawals. It sounds like your own wallet has been stolen, but in reality, someone has taken the keys to the entire protocol’s wallet.
A few reminders—not financial advice:
1. If you’re still using LST-type assets, check the protocol’s official announcements and upgrade history regularly. Don’t focus only on the yield.
2. The multisig queue period isn’t just for show. It gives you time to react and get out.
3. Don’t rush in just because you see a discount. When the NAV is being inflated, what looks like a bargain may just be something someone made up.
A quick look at the market: $BTC is now around 82,818, basically flat over the past 24 hours and down a little over 2% from its early-morning high. News like this can easily stir up sentiment, but a single event won’t change the overall trend.
Keep an eye on your own positions. Don’t gamble.