On October 22, X user Spreek (@spreekaway) reported that an unidentified actor appeared to have compromised the operational hot wallet keys of the liquid staking platform Swell on October 21, including the swETH/rswETH oracle bot. The actor has been continuously increasing the exchange rate by 1% per hour without corresponding ETH to back it up. Spreek noted that the attacker has deployed four malicious contracts. If the relevant upgrade proposals are approved, these contracts could potentially steal approximately 2,513 ETH from Swell's withdrawal and deposit contracts.
All Comments