Swarm release-system breach exposes Bee node wallet keys to malware
Two outlets report that attackers compromised Ethersphere’s software distribution system and released malware targeting private keys stored on affected devices.
Two outlets report that attackers compromised Ethersphere’s software distribution system and released malware targeting private keys stored on affected devices. Ethereum (ETH) is trading at $2,023.32, down 3.4% since this brief published. This is an original TLT brief synthesising 2 outlets (Cryptopolitan, The Cryptonomist), plus live market data, as of Tue, 10 Nov 2026 16:30:05 UTC.
The incident demonstrates how compromising a software release system can turn trusted updates into a mechanism for stealing cryptocurrency wallet credentials. Bee node operators who installed the identified releases may face unauthorized access to wallets and the assets they control.
- Attackers hijacked Ethersphere’s software release system
- Malicious versions were released as bee-js 13.3.0 and Swarm Desktop 0.56.2
- The malware searched for Bee node wallet private keys
- ETH trades at $2,095.44, down 1.31% over 24 hours
Cryptopolitan and The Cryptonomist both describe a blockchain-related supply-chain attack affecting the Swarm ecosystem, with malware capable of compromising wallet security. Cryptopolitan provides the most specific timeline and technical details, reporting that the compromise occurred on November 9 and involved malicious bee-js 13.3.0 and Swarm Desktop 0.56.2 releases designed to locate Bee node wallet private keys. The Cryptonomist frames the event as an Ethereum security alert affecting Swarm wallets and also highlights the role of smart-contract malware. The outlets do not report conflicting figures or versions, although Cryptonomist provides a broader security-focused framing while Cryptopolitan focuses on the hijacked release system and affected software packages.
Ethersphere’s software release system was taken over by hackers, according to Cryptopolitan, turning the distribution channel for its Bee-related tools into a malware delivery mechanism. The outlet reports that the compromise occurred on November 9 and was used to publish malicious versions of bee-js 13.3.0 and Swarm Desktop 0.56.2.
The reported malware was designed to search affected devices for Bee node wallet private keys. Cryptopolitan says finding those keys gave the attackers access to the compromised systems and wallets, while The Cryptonomist characterizes the incident more broadly as a blockchain supply-chain hack affecting Swarm wallets within the 
Ethereum security landscape.
Both outlets corroborate the central development: trusted software releases were used to distribute wallet-targeting malware. Cryptopolitan is more explicit about the affected package names, version numbers and key-search function. The Cryptonomist supplies additional emphasis on the Ethereum security context and smart-contract malware, but the supplied summaries do not quantify user exposure, financial losses or the number of affected wallets.
The affected entities span developer tooling and a desktop client used around the Swarm ecosystem. The two named releases, bee-js 13.3.0 and Swarm Desktop 0.56.2, identify the versions associated with the compromised distribution system. The available coverage does not specify whether every installation was compromised, nor does it provide details about remediation, wallet balances or downstream transactions.
The wider crypto market was flat at the time of the report, with total capitalization at $2.54 trillion and the Fear & Greed index at 32, indicating a “Fear” reading. Ethereum traded at $2,095.44, down 1.31% over 24 hours and 7.37% over seven days, while its market capitalization stood at $256.08 billion; 
Bitcoin was down 0.90% over 24 hours. The attack is therefore occurring against a backdrop of declining short- and weekly performance for ETH and a broader market sentiment classified as fearful.
The incident matters because control of a release system can place downstream users at risk even when they obtain software through an expected channel. The immediate focus is the exposure associated with the two identified releases and any Bee node private keys accessible on affected devices, while the broader market figures show that the security news did not coincide with a positive risk-on move in major crypto assets.
Since this brief published about 19 hours ago, Ethereum (ETH) has moved from $2,095.44 to $2,023.32 — -3.44%, a notable move.
The chart plots ETH's price: grey is the move before this brief published, the vertical dashed line marks the moment it published, the horizontal dashed line is the price then, and the coloured area is the move since — from TLT's market data (daily resolution). It shows what happened after the news, not that the news caused it; many factors move prices. Not financial advice.
At today's peer-to-peer rate, 1 ETH ≈ ₦2.80M (about $2,023.32), down 4.8% over 24 hours. The naira itself trades about 2.6% above the official rate on the P2P market, so a Nigerian buyer's effective cost differs from the headline dollar price.
Live market data
Current prices for the asset in this story — live, source-stamped, updated every 15 minutes.
Figures and sectors in this story, checked live against on-chain aggregators · November 10, 2026.
TLT reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.
Swarm release-system breach exposes Bee node wallet keys to — questions & answers
Which software releases were used to distribute the malware?
Cryptopolitan reports that attackers published malicious versions of bee-js 13.3.0 and Swarm Desktop 0.56.2 through Ethersphere’s compromised release system.
What was the malware designed to steal?
It was programmed to search affected devices for Bee node wallet private keys, which Cryptopolitan says could give attackers access to those wallets.
Did the reported attack cause a broad crypto-market rally?
No. The market was flat, Bitcoin was down 0.90% over 24 hours, and ETH was down 1.31% as the Fear & Greed index registered 32, or Fear.
How much is 1 Ethereum worth in naira today?
About ₦2.80M at the live peer-to-peer (P2P) USDT rate, which is what Nigerians typically trade at — equivalent to roughly $2,023.32. The naira price moves with both ETH's US-dollar price and the USDT/NGN rate; use our Ethereum in naira page for any amount.
Has Ethereum's price moved since this brief was published?
ETH is down 3.44% since this brief first published — trading at $2,023.32 now versus $2,095.44 at publication. TLT re-checks this figure against CoinGecko and Binance every 15 minutes.
Which outlets reported this story?
This is an original TLT brief that synthesises reporting from Cryptopolitan, The Cryptonomist, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.