Swell DAO admin keys reportedly leaked, attacker inflating swETH and rswETH NAV

Security researcher Spreek reports that the admin keys for Swell DAO's swETH and rswETH may have been leaked, with the attacker inflating NAV by up to 1% per hour and deploying 4 malicious upgrade contracts endangering ~2,500 ETH. Researcher 0xQuit sees no indication the funds can be taken: both ProxyAdmins sit behind the Swell Timelock (7-day delay) and a 4/7 multisig.

Detected & updated continuously · Source: Nebula