Hackers have exploited a vulnerability in DeFi aggregator 1inch's resolver smart contract, leading to losses of over $5 million, according to blockchain security firm SlowMist.
The breach primarily affected outdated Fusion v1 resolver contracts, while regular users remained unaffected.
1inch confirmed the attack on March 6, explaining that the flaw had been identified a day earlier. Efforts are now underway to support affected resolvers and prevent similar incidents, with the platform urging resolvers to update their contracts.
Additionally, a bug bounty program has been introduced, offering rewards between $100 and $500,000 to enhance security.
Despite the setback, 1inch continues to lead in DeFi, routing 38.2% of all decentralized exchange (DEX) volume through aggregators in Q4 2024. However, its market share declined by 10% as competitors Odos and CoWSwap gained traction.
The platform’s total trading volume surged by 104% quarter-over-quarter, reaching $1.09 trillion. Ethereum remained the top blockchain for 1inch transactions, followed by Base and Arbitrum.
Loopscale, a decentralized finance platform built on Solana, was forced to pause its lending operations after a major security breach led to losses of around $5.8 million.
Alex Mashinsky, co-founder and former CEO of the defunct crypto lending platform Celsius, is scheduled to be sentenced on May 8, 2025, following his guilty plea to two federal criminal charges late last year.
A decentralized exchange targeted in a multi-million-dollar exploit has recovered its losses just days after the incident, thanks to an unexpected twist involving the hacker themselves.
A recent cyberattack targeting a UK government official’s social media account has highlighted ongoing concerns over digital impersonation and crypto scams.