Swell swETH/rswETH reported rate manipulation and staged ETH-sweep contracts (Oct 2026): actor wallets per researcher Spreek, Swell paused withdrawals
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: Swell (swETH / rswETH)
- Incident date: 2026-10-21
- Reported: 2026-10-23
- Last updated: 2026-10-23
Security researcher Spreek (@spreekaway) reported at 01:28 UTC on 2026-10-22 (8:28 PM CT on 2026-10-21) that operational keys behind Swell's swETH and rswETH appear to be controlled by an unknown actor. According to the report, the actor was raising both tokens' exchange rates by 1% an hour with no ETH behind the increase, and had deployed contracts that could sweep about 2,513 ETH if an upgrade were ever approved. Swell has paused deposits and withdrawals and has not confirmed a compromise or any loss. Sources: Spreek's incident report (https://github.c…
Other addresses in this report: 0x9a475595b1e73e5f63b9eaefb46b6d78b8ce0f71, 0x1bda625d03c0c1b968e53b7450789e8be264b975, 0x4aa19843d3359194e5cb729067b153fc8ff3295d, 0x78fad532b9f69e0c48cc6aa415a2b88f1c47e773, 0xbe95afc3ee77e0ebe257357d2db791a6913b12da, 0x867d0baa31e50aaf9ae6c6276c9320229a90e1a3, 0xd184df90a137b237dc17db02dd4840300e46d9dc, 0xa3e7a9ffef733c3de17f3c4ebdfc65084cde4a84, 0xd39f0ec0c7bb54905006878cddecce262fa47dc7, 0xa4f1c1406d142d1c641c338086d7e09cb67e7819, 0xf693282ee2000a5fc1305f49308fd996d2315f6a, 0x2481a87fbe9b48700283dbcf2a860c7ea1de5e56, 0xe2bc03dbaaaacecb01cf2c34457f73de3e0a30f8