1inch said its protocols, infrastructure and user funds were not affected by the exploit targeting independent resolver TrustedVolumes.
TrustedVolumes, an independent market maker and resolver used by 1inch Fusion, confirmed it was exploited and said about $6.7 million in stolen funds are being held across three Ethereum addresses.
In a Thursday X post, the market maker said the stolen funds were split across three wallets, with two addresses each holding about $3 million and a third holding about $700,000. TrustedVolumes said it was open to “constructive communication” over a bug bounty and a “mutually acceptable resolution.”
The confirmation came after Web3 security company Blockaid said its exploit detection system had identified an ongoing Ethereum exploit targeting TrustedVolumes. Blockaid said the attack involved a TrustedVolumes-controlled custom swap infrastructure. Blockaid initially estimated that about $5.87 million had been extracted, including Wrapped Ether, USDT, Wrapped Bitcoin and USDC.
