1inch Loses $5 Million in Crypto Theft—User Funds Remain Safe

The breach targeted resolvers—entities responsible for executing trades. 1inch detected the vulnerability on March 5, identifying that the issue stemmed from the old Fusion v1 implementation. The platform publicly disclosed the problem in a March 6 post on X.

By March 7, SlowMist, a blockchain security firm, confirmed in a post on X, "According to our analysis, this incident resulted in a loss of 2.4 million USD Coin USDC $1.00 and 1276 Wrapped Ethereum WETH $2,141.82 , totaling over $5 million".

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

What are dApps in Crypto? (Explained with Animations)

SUBSCRIBE

ON YOUTUBE

While the stolen funds belonged to resolvers running outdated contracts, 1inch assured that individual users’ assets remained untouched. "No end-user funds were at risk—only resolvers using Fusion v1 in their own contracts", the platform stated.

In response to the incident, the platform urged all resolvers to review and update their contracts:

We’re actively working with affected resolvers to secure their systems. We urge all resolvers to audit and update their contracts immediately.

To prevent similar exploits, 1inch introduced bug bounty programs to identify security gaps and explore ways to recover the stolen assets.

On February 12, zkLend, a decentralized lending protocol on Starknet, lost $4.9 million in a security breach. How did hackers pull it off? Read the full story.