Key Compromise

Security incidents tagged Key Compromise. Newest first.

1 Key Compromise incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Oct 22HighSwell freezes swETH and rswETH after suspected admin key compromise inflates their NAVNo fix needed
Swell swETH and rswETH (Ethereum liquid staking / restaking tokens) No fix needed
On Oct 22 2026 researcher Spreek reported that the admin keys for Swell DAO's swETH and rswETH liquid staking tokens appeared to be compromised: the tokens' NAV was being raised without ETH backing, and four malicious upgrade contracts that could take about 2,500 ETH had been deployed but not yet queued through the multisig. Swell said no ETH had left its deposit or withdrawal contracts, then on Oct 23 at 06:39 UTC paused deposits, withdrawal requests and ETH claims for both tokens until NAV is returned to the correct value. Swell has not confirmed a key compromise or published a cause, and no reopening date has been given.
Open incident →

Swell freezes swETH and rswETH after suspected admin key compromise inflates their NAV
Swell
@swellnetworkio
As we continue to work with our security partners and Seal911 to fully secure our infrastructure, we have paused deposits and withdrawals for swETH and rswETH. The next step to resume normal operations is to return NAV to the correct value, after which we will resume deposits and withdrawals. All funds are safe, and we are working carefully with our security partners to resume operations securely. We advise you to exercise increased vigilance at this time and to follow only communications from official channels. Events like this can lead to an increase in phishing attempts.
Oct 23, 2026view on x