{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Swell freezes swETH and rswETH after suspected admin key compromise inflates their NAV · updates",
  "home_page_url": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026",
  "feed_url": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026/feed.json",
  "description": "On Oct 22 2026 researcher Spreek reported that the admin keys for Swell DAO's swETH and rswETH liquid staking tokens appeared to be compromised: the tokens' NAV was being raised without ETH backing, and four malicious upgrade contracts that could take about 2,500 ETH had been deployed but not yet queued through the multisig. Swell said no ETH had left its deposit or withdrawal contracts, then on Oct 23 at 06:39 UTC paused deposits, withdrawal requests and ETH claims for both tokens until NAV is returned to the correct value. Swell has not confirmed a key compromise or published a cause, and no reopening date has been given.",
  "language": "en",
  "_pwn": {
    "slug": "swell-sweth-rsweth-admin-key-compromise-oct-2026",
    "severity": "high",
    "status": "live",
    "patchStatus": "no-fix-needed",
    "rss": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026#2026-10-23-3212560c",
      "url": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026#2026-10-23-3212560c",
      "title": "Swell freezes swETH and rswETH after suspected admin key compromise inflates their NAV: Swell pauses swETH and rswETH deposits, withdrawal requests and ETH claims (06:39 UTC), working with Seal911 until NAV is corrected; no reopening date.",
      "content_text": "Swell freezes swETH and rswETH after suspected admin key compromise inflates their NAV: Swell pauses swETH and rswETH deposits, withdrawal requests and ETH claims (06:39 UTC), working with Seal911 until NAV is corrected; no reopening date.\n\nSource: https://x.com/swellnetworkio/status/2113520767665307910",
      "date_published": "2026-10-23T00:00:00.000Z",
      "external_url": "https://x.com/swellnetworkio/status/2113520767665307910",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026#2026-10-22-643a59cd",
      "url": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026#2026-10-22-643a59cd",
      "title": "Swell freezes swETH and rswETH after suspected admin key compromise inflates their NAV: Researcher Spreek reports swETH/rswETH admin keys appear compromised, NAV raised by up to 1% an hour unbacked, and four malicious upgrade contracts deployed that could take ~2,500 ETH.",
      "content_text": "Swell freezes swETH and rswETH after suspected admin key compromise inflates their NAV: Researcher Spreek reports swETH/rswETH admin keys appear compromised, NAV raised by up to 1% an hour unbacked, and four malicious upgrade contracts deployed that could take ~2,500 ETH.\n\nSource: https://www.0xcert.com/advisory/0xCERT-2026-0262",
      "date_published": "2026-10-22T00:00:00.000Z",
      "external_url": "https://www.0xcert.com/advisory/0xCERT-2026-0262",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026#2026-10-22-654447ce",
      "url": "https://pwn.watch/i/swell-sweth-rsweth-admin-key-compromise-oct-2026#2026-10-22-654447ce",
      "title": "Swell freezes swETH and rswETH after suspected admin key compromise inflates their NAV: Swell says it is investigating reports of suspicious activity and that no ETH has left the swETH or rswETH deposit or withdrawal contracts.",
      "content_text": "Swell freezes swETH and rswETH after suspected admin key compromise inflates their NAV: Swell says it is investigating reports of suspicious activity and that no ETH has left the swETH or rswETH deposit or withdrawal contracts.\n\nSource: https://cryptowatchdesk.com/news/swell-pauses-sweth-rsweth-deposits-withdrawals-nav-correction",
      "date_published": "2026-10-22T00:00:00.000Z",
      "external_url": "https://cryptowatchdesk.com/news/swell-pauses-sweth-rsweth-deposits-withdrawals-nav-correction",
      "tags": [
        "high"
      ]
    }
  ]
}