Digital Asset
Intelligence
Security Incident · Exchange

1inch Contract Vulnerability: $5.00M Reported Loss

·Historical incident record

Incident Overview

An attacker exploited a smart contract belonging to the 1inch DEX aggregator, stealing $5 million in the USDC stablecoin and wETH. According to the platform, the vulnerability existed in "smart contracts using the obsolete Fusion v1 implementation", and the stolen funds belonged to resolvers (that is, entities that fulfill 1inch orders) rather than users.

Sources & References

Original incident referencehttps://blog.1inch.io/vulnerability-discovered-in-resolver-contract/ (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    1inch

    Attack methodAccount Compromise
    Reported lossNot disclosed
  2. Incident date
    Target

    Berally

    Attack methodPrivate Key Leakage
    Reported loss$ 86,725
  3. Incident date
    Target

    Four.Meme

    Attack methodBusiness Logic Flaw
    Reported loss$ 183,000
  4. Incident date
    Target

    KiloEx

    Attack methodContract Vulnerability
    Reported loss$ 8,440,000
  5. Incident date
    Target

    Meow

    Attack methodAccount Compromise
    Reported lossNot disclosed