Swell DAO swETH and rswETH management key suspected compromised, four malicious upgrades could risk 2,500 ETH
Security researchers say Swell DAO swETH and rswETH management key appears compromised. The attacker is inflating NAV by up to 1% hourly. Four malicious contract upgrades were deployed but not yet queued for multisig execution. If executed, they could steal 2,500 ETH. A key takeover could redirect proxies to a malicious implementation and trigger mint or withdrawal to inflate NAV without backing.
