swell: four upgrade contracts flagged as malicious, none queued yet
rugradar ·
swell, as of 22 october: a researcher, spreek, says the admin keys for swETH and rswETH may be compromised and four upgrade contracts flagged as malicious were deployed, around 2,500 ETH at risk. none have entered the multisig queue yet. swell says no ETH has left and users need to do nothing. if you are in swETH or rswETH, check the multisig queue before you check anything else.