POPA ReconAdmin keys for Swell DAO's swETH and rswETH appear to be compromised (railway related?)
Source reports
- Admin keys for Swell DAO's swETH and rswETH appear to be compromised (railway related?) * Attackers are raising NAV by max 1% (unbacked) each hour * Four malicious upgrade contracts have been deployed (although not queued yet through multisig) that could steal approx 2500 ETH — @spreekaway (X), Oct 22, 2026, 01:28 UTC
- 10월은 업토버가 아니라 해킹토버일수도? 이번에는 Railway 라는 클라우드 플랫폼이 심각한 키 유출(정확한 범위는 자기들도 모르는지 아직 안 알려줌)이 있어서 비상모드로 전환하고 디플로이를 막았는데, Swell (r)swETH 컨트랙트의 admin key가 이에 영향받아 유출된 것으로 의심되는 정황이 있음(업그레이드 proposal 만 올라오고 멀티시그 서명이 안되어서 자금탈취로 이어진 상태는 아님) Railway 랑 별개로 지금 GitLab에는 임의의 사용자가 깃랩 서버 탈취 및… — Korean Alpha EN, Oct 22, 2026, 02:25 UTC
- Swell's swETH and rswETH admin keys appear compromised, with attackers inflating their value hourly and preparing upgrades that could drain about 2,500 ETH Source — ahboyashreads, Oct 22, 2026, 03:22 UTC
- Swell's swETH and rswETH admin keys appear compromised, with attackers inflating their value hourly and preparing upgrades that could drain about 2,500 ETH Source — Rickler Feed, Oct 22, 2026, 03:22 UTC
- Swell DAO's swETH and rswETH admin keys reportedly compromised; malicious upgrade contracts deployed - 𝕏/@spreekaway 🔗 Discord · Leviathan · Source 🗺️ Swell · Compromised · DAO 🕵️ @JLJohn via 𝕏 — Rickler Feed, Oct 22, 2026, 06:42 UTC
- Swell DAO's swETH and rswETH admin keys reportedly compromised; malicious upgrade contracts deployed - 𝕏/@spreekaway 🔗 Discord · Leviathan · Source 🗺️ Swell · Compromised · DAO 🕵️ @JLJohn via 𝕏 — Закрепи.sender, Oct 22, 2026, 06:42 UTC
- Swell incident tied to bot-key abuse; 2,513 ETH not confirmed lost - 𝕏/@odysseas_eth 🔗 Discord · Leviathan · Source 🗺️ Swell · $ETH · Ethereum 🕵️ @w00tcake — Rickler Feed, Oct 22, 2026, 12:03 UTC
- Swell incident tied to bot-key abuse; 2,513 ETH not confirmed lost - 𝕏/@odysseas_eth 🔗 Discord · Leviathan · Source 🗺️ Swell · $ETH · Ethereum 🕵️ @w00tcake — Закрепи.sender, Oct 22, 2026, 12:03 UTC
Excerpts are quoted from the linked sources, which own their text.