The tweet was deleted by the author.
But we saved everything 🙂.
$6 million stolen from TrustedVolumes in new 1inch-related attack
TrustedVolumes, a liquidity provider and market maker connected to the 1inch decentralized exchange aggregator, was exploited for approximately $5.87 million. According to blockchain security firm Blockaid, the attacker drained funds from the company’s Ethereum resolver contract.
Highlights
- TrustedVolumes lost approximately $5.87 million in the attack.
- Stolen funds included 1,291 WETH, 206,282 USDT, 16.94 WBTC, and 1.27 million USDC.
- The exploit targeted a custom RFQ proxy contract, not the main 1inch exchange route.
- The attacker is believed to be the same operator behind the earlier 1inch Fusion V1 vulnerability.
Details of the attack
The stolen assets included 1,291.16 WETH, 206,282 USDT, 16.939 WBTC, and 1,268,771 USDC. The exploit targeted a custom RFQ (Request for Quote) proxy server operated by TrustedVolumes, rather than the standard user trading route on 1inch.
In its statement, 1inch has confirmed that neither 1inch nor any of the 1inch protocols are involved in this incident. There has been no impact on 1inch systems, infrastructure, or user funds. TrustedVolumes operates independently as a liquidity provider and is utilized by multiple protocols across the industry. It is not exclusive to 1inch.
Blockaid linked the incident to the same attacker responsible for exploiting a vulnerability in 1inch Fusion V1 in March 2025. However, this attack involved a different vulnerability—one specific to TrustedVolumes’ custom RFQ proxy contract. Security firm CertiK reported that the attacker used a public function to register as an AllowedOrderSigner and then executed orders that transferred pre-authorized funds from the victim’s address.
Persistent vulnerabilities in DeFi infrastructure
The incident highlights the ongoing risks in decentralized finance, particularly with third-party components and custom smart contracts. Even projects integrated with major aggregators like 1inch remain vulnerable if additional infrastructure is not properly secured.
This latest exploit serves as a reminder that sophisticated attackers continue to target permission mechanisms and proxy contracts, often leading to multi-million-dollar losses. Experts recommend that users revoke approvals related to compromised contracts to limit further risk.
We also reported that the Lazarus Group linked to the biggest DeFi exploit of 2026.
This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.
Subscribe to TU news
Did you like the article?
Latest Crypto News
Weekly Top Bonuses
Top News
Top 5 companies for you
United States
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
Live News
