What happened to TrustedVolumes and 1inch?

TrustedVolumes, a liquidity provider and market maker for 1inch, suffered an exploit that drained nearly $5.9 million in crypto assets. Blockchain security firm Blockaid said the attack targeted a resolver contract on Ethereum.

How much crypto was stolen in the TrustedVolumes exploit?

According to Blockaid, the attacker stole around $5.87 million worth of assets. The funds included wrapped Ether, Tether, wrapped Bitcoin and USD Coin.

Was 1inch itself directly hacked?

The exploit targeted TrustedVolumes infrastructure connected to 1inch rather than the main 1inch protocol itself. However, the incident still impacts confidence around the broader 1inch liquidity ecosystem.

Who was allegedly behind the exploit?

Blockaid said the attacker appears to be the same entity linked to the March 2025 exploit targeting 1inch Fusion V1. That earlier attack reportedly caused losses of around $5 million.

What vulnerability caused the TrustedVolumes exploit?

The exploit reportedly involved a vulnerability tied to a TrustedVolumes-controlled custom request-for-quote swap proxy system. Blockaid said the weakness was different from the vulnerability used in the previous 1inch Fusion exploit.

Why are DeFi exploits increasing in 2026?

The DeFi sector has become a larger target because protocols now manage billions of dollars in on-chain liquidity. Complex smart contracts, cross-chain infrastructure and custom integrations also create more attack surfaces for hackers.

How bad have crypto exploit losses become this year?

DefiLlama data showed crypto hackers stole roughly $635.2 million in April alone. That was the largest monthly total since the $1.5 billion Bybit exploit in February 2025.

What other major DeFi hacks recently affected the market?

Recent attacks included the $285 million social engineering exploit involving Drift and the $293 million Kelp DAO exploit. Both incidents disrupted decentralised finance liquidity and investor confidence.

1inch market maker loses $5.9M in exploit

Written by Jon CuthbertPublished May. 7 2026Last Updated May. 7 2026

TrustedVolumes, a liquidity provider and market maker for decentralised exchange aggregator 1inch, has been hit by an ongoing exploit that has drained nearly $5.9 million in digital assets.

Blockchain security firm Blockaid said the attack targeted TrustedVolumes’ resolver contract on the Ethereum blockchain and remained active as of Wednesday.

According to Blockaid, the stolen funds included 1,291.16 wrapped Ether, 206,282 Tether, 16.939 wrapped Bitcoin and more than 1.26 million USD Coin tokens.

Blockaid said the attacker appeared to be the same entity responsible for the March 2025 exploit of 1inch Fusion V1, which resulted in losses of around $5 million.

However, the security firm noted that the latest exploit involved a different vulnerability tied to a TrustedVolumes-controlled custom request-for-quote swap proxy system.

The exploit comes as decentralised finance platforms face increasing security pressure following a series of high-profile attacks across the crypto industry.

Recent incidents include the $285 million social engineering attack on Drift and the $293 million exploit involving Kelp DAO, both of which significantly impacted decentralised finance liquidity markets.

Data from DefiLlama showed that hackers and exploiters stole around $635.2 million across the crypto sector in April alone, marking the highest monthly losses since the $1.5 billion Bybit hack in February 2025.

The TrustedVolumes incident represents the fifth major crypto exploit reported since the beginning of May as concerns over decentralised finance security continue intensifying.

At the time of reporting, Ethereum price was $2,333.70.