Ethereum security alert: Swarm users must replace exposed wallet keys

Official software releases carried wallet-stealing malware into Swarm’s ecosystem, prompting a critical Ethereum security alert from SlowMist on November 10, 2026. The supply-chain attack compromised Ethersphere’s bee-js package and Swarm Desktop app, with users urged to remove affected software, install clean versions and replace exposed wallet keys. Key takeaways The poisoned releases were bee-js 13.3.0 and Swarm Desktop 0.56.2. An Ethereum smart contract helped attackers manage malware infrastructure. Cleanup instructions include backdoor removal and wallet-key replacement, not just software updates. Ethereum security alert follows compromised releases Ethersphere’s automated release process was compromised on November 9, 2026 , distributing malicious software through official channels. The affected products belong to Swarm , a decentralized storage network within Ethereum’s ecosystem.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to The Cryptonomist.