1 min read
Add as a preferred source on Google

Spreek Flags Security Concern for Swell DAO’s swETH and rswETH Admin Keys

Spreek described four deployed malicious upgrade contracts outside the multisignature queue and a potential theft of about 2,500 ETH.

Mentioned assets
A metal key lies beside the open latch of a steel lockbox / TokenPost.ai (mono)
A metal key lies beside the open latch of a steel lockbox / TokenPost.ai (mono)

Crypto analyst Spreek warned that Swell DAO administrator keys for swETH and rswETH may have been exposed, putting holders at risk and potentially enabling theft of about 2,500 Ether (ETH).

Spreek's onchain monitoring pointed to a possible connection between the suspected exposure and Railway. The assessment described an attacker lifting the tokens' net asset value (NAV) by as much as 1% each hour without asset backing. Spreek flagged four upgrade contracts as malicious; they had been deployed but were not in the multisignature queue.

Spreek described the 2,500 ETH as a potential theft amount, not a completed loss. He also disclosed that Claude helped draft the incident analysis. Some details had not been verified, he said, though he considered the core information broadly accurate. Both the key exposure and possible Railway connection were framed as suspicions.

Simon Yoon

Reporter

Simon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to info@tokenpost.com.

Loading…