On March 5, 2025, the 1inch team identified a vulnerability in resolver smart contracts related to the outdated Fusion v1 implementation. This issue did not compromise user funds but affected resolvers utilizing Fusion v1 in their contracts. Following this discovery, a hack was reported involving the market maker Trusted Volumes, which resulted in a loss exceeding $4.5 million, alongside smaller market makers losing approximately $0.5 million. The total loss due to the exploitation of the vulnerability is estimated to be over $5 million, including more than 2.4 million USDC and 1,276 WETH. 1inch has initiated damage control measures, urging audits and rolling out a bug bounty program to enhance security. The investigation into the incident is ongoing, with 1inch emphasizing that regular users were not impacted by the breach.
1inch loses $5 million to smart contract bug March 5, 2025 https://t.co/GrHs8wzL55
NEW: A few months ago, we uncovered an authentication bypass in Web3Auth that could have led to full account takeover. In this deep dive, we break down how we found the issue and expose other authentication misconfigurations lurking in Web3. https://t.co/stjqbwuYsb
NEW: A few months ago, we uncovered an authentication bypass in Web3Auth that could have led to full account takeover. In this deep dive, we break down how we found the issue and expose other authentication misconfigurations lurking in Web3. Full Breakdown 👇…