Malicious contract upgrades or threatened theft of approximately 2,500 ETH, Swell admin keys suspected to be compromised
Odaily report: According to Spreek monitoring, the admin keys of Swell DAO's swETH and rswETH are suspected to have been compromised. The attacker raised the token net asset value (NAV) by up to 1% per hour without asset backing. The attacker also deployed 4 malicious upgrade contracts, which, if executed, could steal approximately 2,500 ETH. Currently, these contracts have not entered the execution queue through multisig. Spreek speculates that this incident may be related to the cloud deployment platform Railway, but states that this judgment is based only on timing coincidence and there is no conclusive evidence yet.
