News · Security & Hacks
An intruder seized 30 operational keys, inflating swETH and rswETH rates and deploying unexecuted exploit payloads targeting 2,513 ETH.
Key point 1 of 3
01
An attacker gained control of 30 Swell operational hot keys across four blockchains starting on Oct. 21.
Key point 2 of 3
02
The compromised oracle bot increased swETH and rswETH exchange rates by 1% per hour, adding over 580 unbacked ETH to reported balances.
Key point 3 of 3
03
Roughly 2,513 ETH in protocol contracts remains protected by a seven-day timelock that has no queued malicious upgrades.
Context
The incident highlights systemic vulnerabilities in operational bot automation, where key management failures can bypass rate controls despite external proof-of-reserve mechanisms…
Why it matters
Holders of swETH and rswETH face pricing discrepancies across decentralized markets, while Swell must orchestrate an emergency rotation of dozens of operational keys across…
What to watch
Monitor Swell's 4-of-7 Safe multi-signature activity and timelock contract to verify hot-key revocation and whether emergency lockdown procedures are initiated.
Sources
Built from 1 primary source, machine-checked before publication.
Keep reading
Read the full story
AI-generated, source-verified. Sources, citations and live prices on the article page.