Ongoing exploit on 1inch's TrustedVolumes: nearly $6M drained, attacker linked to previous attack
## Context A new exploit is hitting the 1inch protocol, this time via its liquidity provider TrustedVolumes. According to Blockaid, the attacker is the same actor who had already exploited 1inch Fusion V1 in March 2025, draining approximately **$5M** at the time. The ongoing exploit has already allowed the theft of nearly **$6M** in assets. ## Key Details - **Amount drained**: **$6M** (compared to **$5M** during the March 2025 exploit). - **Link to a previous exploit**: The attacker is identified as the same actor responsible for the Fusion V1 exploit in **March 2025**. - **Target**: The…
A new exploit has hit the decentralized aggregation protocol 1inch, this time via its liquidity provider TrustedVolumes. According to Blockaid's analysis, the attacker is the same actor who had already exploited 1inch Fusion V1 in March 2025, draining about 5 million dollars at the time. The ongoing exploit has already stolen nearly 6 million dollars in assets, according to available data. The facts The exploit targets TrustedVolumes, a liquidity provider integrated into 1inch and used to facilitate decentralized exchanges. The total amount drained amounts to nearly 6 million dollars, a figure higher than the 5 million stolen in the previous exploit on Fusion V1 in March 2025. Blockaid's analysts have linked the two incidents, suggesting that the same malicious actor is behind both attacks. At this stage, no official communication from 1inch has been published regarding the corrective measures put in place or possible compensation for the victims. The lack of an immediate response raises questions about the protocol's responsiveness to such incidents. Why it matters This event highlights the persistent vulnerability of decentralized finance (DeFi) protocols, even among established players like 1inch. For investors, this repetition of exploits is a reminder of the importance of diversifying risks and favoring platforms that benefit from recent security audits as well as robust protection mechanisms. In the short term, the protocol's native token, 1INCH, could face selling pressure due to the uncertainty surrounding this incident. However, the impact should remain limited given the protocol's market capitalization, estimated at 136 million dollars. In the long term, the repetition of such exploits could erode user trust in aggregation solutions like 1inch, to the benefit of competitors perceived as safer. Points to watch 1inch's response: Potential announcements regarding enhanced security measures or compensation for victims. TVL (Total Value Locked) trends: Monitoring the impact on the protocol's liquidity, which could indicate user withdrawals. Analysis of the 1INCH token movements: Market reaction to this incident and the associated risks. Comparison with competitors: Assessment of the impact on 1inch's market share relative to other aggregation protocols. Investors and users of 1inch are advised to remain vigilant and closely follow developments related to this exploit, as well as the responses provided by the protocol team.