1inch Exchange AggregationRouter V5

Consensys1 Aug 2022Files named in the report

Consensys reviewed 1inch Network (1inch Exchange AggregationRouter V5) on 1 Aug 2022: 11 findings, 0 critical; none marked fixed.

No open critical findings

Open the report Open 1inch Network’s security record

Report hosted on diligence.security.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	2	0	0
Medium	4	0	0
Low	5	0	0

HighECDSA library has a vulnerability for signature malleability of EIP-2098 compact signaturesOpen

The report gives no description here.

HighMalicious maker can take more takers funds than taker expectedOpen

The report gives no description here.

MediumECDSA incorrect size provided for calldata in the static callOpen

The report gives no description here.

MediumEthereum reimbursements sent to an incorrect addressOpen

The report gives no description here.

MediumInvalidating users ordersOpen

The report gives no description here.

MediumRe-entrancy risk in UniERC20Open

The report gives no description here.

Low_WETH private constant address in UnoswapRouter makes for tricky deployments to other chainsOpen

The report gives no description here.

LowOrder book slippageOpen

The report gives no description here.

LowOrder cancellation event spam in orderMixinOpen

The report gives no description here.

LowReentrancy potential issue for contracts building on top RFQOrderMixinOpen

The report gives no description here.

Show 1 more

LowSelfdestruct may be removed as an opcode in futureOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (30)

1inch-contract/contracts/AggregationRouterV5.sol
solidity-utils/contracts/libraries/RevertReasonForwarder.sol
limit-order-protocol/contracts/helpers/NonceManager.sol
limit-order-protocol/contracts/OrderRFQLib.sol
1inch-contract/contracts/interfaces/IUniswapV3Pool.sol
solidity-utils/contracts/libraries/ECDSA.sol
solidity-utils/contracts/libraries/StringUtil.sol
limit-order-protocol/contracts/OrderRFQMixin.sol
1inch-contract/contracts/interfaces/IAggregationExecutor.sol
solidity-utils/contracts/EthReceiver.sol
limit-order-protocol/contracts/helpers/PredicateHelper.sol
limit-order-protocol/contracts/OrderLib.sol
1inch-contract/contracts/routers/GenericRouter.sol
solidity-utils/contracts/libraries/UniERC20.sol
1inch-contract/contracts/interfaces/IUniswapV3SwapCallback.sol
1inch-contract/contracts/helpers/Errors.sol
solidity-utils/contracts/interfaces/IDaiLikePermit.sol
limit-order-protocol/contracts/OrderMixin.sol
solidity-utils/contracts/libraries/SafeERC20.sol
solidity-utils/contracts/OnlyWethReceiver.sol
1inch-contract/contracts/routers/UnoswapV3Router.sol
limit-order-protocol/contracts/libraries/ArgumentsDecoder.sol
limit-order-protocol/contracts/libraries/Errors.sol
1inch-contract/contracts/routers/UnoswapRouter.sol
limit-order-protocol/contracts/helpers/AmountCalculator.sol
limit-order-protocol/contracts/interfaces/NotificationReceiver.sol
solidity-utils/contracts/interfaces/IWETH.sol
1inch-contract/contracts/routers/ClipperRouter.sol
1inch-contract/contracts/interfaces/IClipperExchangeInterface.sol
limit-order-protocol/contracts/interfaces/IOrderMixin.sol

Part of 1inch Network’s security record

1inch Network

Audits42 audits by 13 firmsLast audit Jul 2026, by Hexens.

Critical findings2 open critical findingsReported in “1inch Liquidity Protocol” by Consensys, Dec 2020. Not marked fixed in that report.

IncidentIncident 6 Mar 2025Source: De.Fi incident database.

Open 1inch Network’s security record

Security firm

Consensys

41 projects reviewed · 59 reports · latest Oct 2024

See Consensys’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.