Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·EudYcr…aC5JSummary
1inch is a decentralized exchange (DEX) aggregator and liquidity protocol founded in 2019 by Sergej Kunz and Anton Bukov, operating across Ethereum and multiple EVM-compatible chains. The platform has experienced a series of security incidents between late 2024 and mid-2025, including a front-end supply chain attack, a private key compromise, a $5 million Fusion v1 resolver exploit, and a separate $5.87 million attack on a partner resolver — raising questions about operational security and smart contract lifecycle management. Additional concerns include alleged connections between co-founder Anton Bukov and the Russian FSS Academy, governance centralization risks, and sustained token value erosion since the 2021 peak.
Connected Entities
1 entities- + 1 more
Timeline(9 events)
May 2019
Sergej Kunz and Anton Bukov prototype the 1inch DEX aggregator at the New York ETHGlobal hackathon.
August 2020
1inch protocol launches publicly as a DEX aggregator routing trades across multiple decentralized exchanges.
December 2020
1INCH governance token distributed via retroactive airdrop; one wallet allegedly received tokens then valued at ~$22.7 million according to Molfar Intelligence.
18 September 2024
1inch announces Fusion+, an intent-based cross-chain atomic swap system enabling trustless cross-chain swaps without bridges.
30 October 2024
1inch front-end compromised in Lottie Player supply chain attack; 'Ace Drainer' malicious popups served to users. 1inch Foundation later proposes $768,026 USDC reimbursement.
9 December 2024
Private key of the 1inch Labs Resolver smart contract owner compromised; attacker alters contract settings and transfers funds. 1inch revokes access and announces enhanced security measures.
5 March 2025
Attacker exploits buffer overflow in deprecated Fusion v1 Settlement contract, stealing approximately $5 million (2.4M USDC + 1,276 WETH) from resolvers still using legacy contracts.
6 March 2025
1inch and the affected resolver negotiate with the attacker on-chain; majority of stolen funds returned by ~4:12 AM, with attacker retaining ~$450,000 as a bug bounty (~10%).
7 May 2025
TrustedVolumes, a 1inch resolver and liquidity provider, exploited for approximately $5.87 million via a flaw in its custom RFQ proxy server; attributed to the same attacker as the March 2025 Fusion v1 hack.
Decision Log
- hash: H4R8G5sYnHNR5X4PuvHMyHrkuzBLgRXDgjJxvLKPmuVp
- hash: 9ghn8LCPfX4ShNEwyrku7d2dSq4MaP3UEPsocSmiucdk
- hash: GRPtGV9oZnDtxvfCLRT4JVcbHxyHxvqzVqHQHrtZFP1e
This investigation is cryptographically anchored to the Solana blockchain (3 events). 30 of 36 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:28 AM
last updated: 8/30/2026, 5:14:04 AM
avoid.net — verified advice for a post-truth world