Summary
1inch is a decentralized exchange (DEX) aggregator and liquidity protocol founded in 2019 by Sergej Kunz and Anton Bukov, operating across Ethereum and multiple EVM-compatible chains. The platform has experienced a series of security incidents between late 2024 and mid-2025, including a front-end supply chain attack, a private key compromise, a $5 million Fusion v1 resolver exploit, and a separate $5.87 million attack on a partner resolver — raising questions about operational security and smart contract lifecycle management. Additional concerns include alleged connections between co-founder Anton Bukov and the Russian FSS Academy, governance centralization risks, and sustained token value erosion since the 2021 peak.
Connected Entities
1 entities- + 1 more
Timeline(9 events)
2019-05-01
Sergej Kunz and Anton Bukov prototype the 1inch DEX aggregator at the New York ETHGlobal hackathon.
2020-08-01
1inch protocol launches publicly as a DEX aggregator routing trades across multiple decentralized exchanges.
2020-12-01
1INCH governance token distributed via retroactive airdrop; one wallet allegedly received tokens then valued at ~$22.7 million according to Molfar Intelligence.
2024-09-18
1inch announces Fusion+, an intent-based cross-chain atomic swap system enabling trustless cross-chain swaps without bridges.
2024-10-30
1inch front-end compromised in Lottie Player supply chain attack; 'Ace Drainer' malicious popups served to users. 1inch Foundation later proposes $768,026 USDC reimbursement.
2024-12-09
Private key of the 1inch Labs Resolver smart contract owner compromised; attacker alters contract settings and transfers funds. 1inch revokes access and announces enhanced security measures.
2025-03-05
Attacker exploits buffer overflow in deprecated Fusion v1 Settlement contract, stealing approximately $5 million (2.4M USDC + 1,276 WETH) from resolvers still using legacy contracts.
2025-03-06
1inch and the affected resolver negotiate with the attacker on-chain; majority of stolen funds returned by ~4:12 AM, with attacker retaining ~$450,000 as a bug bounty (~10%).
2025-05-07
TrustedVolumes, a 1inch resolver and liquidity provider, exploited for approximately $5.87 million via a flaw in its custom RFQ proxy server; attributed to the same attacker as the March 2025 Fusion v1 hack.
Decision Log
- hash: H4R8G5sYnHNR5X4PuvHMyHrkuzBLgRXDgjJxvLKPmuVp
- hash: 9ghn8LCPfX4ShNEwyrku7d2dSq4MaP3UEPsocSmiucdk
- hash: GRPtGV9oZnDtxvfCLRT4JVcbHxyHxvqzVqHQHrtZFP1e
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:28 AM
last updated: 6/14/2026, 11:15:54 PM
avoid.net — verified advice for a post-truth world