Hacker returns $5 million stolen funds to 1inch after negotiation
1inch, a leading decentralized exchange (DEX) aggregator, recently reported a $5m critical breach that resulted in a vulnerability in deprecated 1inch Fusion v1 contracts.
The breach, which occurred on March 5, was attributed to a vulnerability in an outdated version of the platform’s smart contract, specifically within its Fusion v1 resolver. The hacker exploited this flaw, initiating unintended transactions and stealing funds from the platform’s third-party market maker, TrustedVolumes, reports Bein Crypto.
However, after engaging in negotiations with the hacker, 1inch successfully recovered most of the stolen funds. The hacker returned the funds, retaining a portion as a bug bounty. This outcome highlights a growing trend in decentralized finance (DeFi) where white-hat hackers, after exploiting vulnerabilities, return stolen funds in exchange for rewards.
Ongoing security challenges in DeFi
Despite the successful recovery, the incident underscores the persistent security risks faced by DeFi platforms. This breach follows a similar security issue from October 2024, where 1inch experienced a front-end compromise due to a supply chain attack. Both events highlight the vulnerabilities that still exist within the DeFi ecosystem, necessitating continuous monitoring and rapid response systems to protect user assets.
Although 1inch managed to resolve the breach, the incident illustrates the ongoing challenges in ensuring the security of decentralized platforms. The company has since redeployed its resolver contracts as a precautionary measure to prevent further exploits, signaling the need for regular audits and proactive vulnerability detection within the DeFi space.
The return of funds following the breach may set a precedent for future ethical hacking and negotiations within DeFi. It highlights the importance of robust security measures and the necessity for ongoing vigilance to safeguard against similar incidents in the future. For 1inch, this breach serves as another reminder of the need to continuously refine their security practices to stay ahead of evolving threats.
Latest Crypto News
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
