Swell's operational hot keys compromised, risking 2,513 ETH theft
Summary
An unknown actor has compromised the operational hot keys of the liquid staking platform Swell on October 21, reportedly affecting the swETH/rswETH oracle bot and raising exchange rates by 1% per hour without any backing from Ethereum (ETH). This incident highlights vulnerabilities in DeFi platforms, particularly as four malicious contracts have been deployed that could potentially steal approximately 2,513 ETH from Swell's withdrawal and deposit contracts if any proposed upgrades are approved.
Tokens
$ETH
Analysis
Swell: Swell operates as a liquid staking platform on Ethereum, enabling users to stake ETH while receiving liquid tokens such as swETH for use in DeFi. The platform maintains operational hot keys that control key functions including its swETH/rswETH oracle bot. In the reported incident, these hot keys were compromised by an unknown actor on October 21. Spreek: Spreek is an X user focused on crypto security and protocol incidents. Spreek publicly disclosed the apparent compromise of Swell's operational hot keys and the deployment of four malicious contracts targeting the platform's withdrawal and deposit mechanisms. Security: Operational hot keys on liquid staking platforms manage critical components such as oracle bots and contract upgrades. Threat Vector: Deployed malicious contracts in DeFi environments can target withdrawal and deposit functions if protocol upgrades receive approval.
Categories
defiethereumcryptotechbasehyperliquidon_chain_whaleai_agents