1inch Fusion v1

OXORIORepository at commit f975e2e

Audit

OXORIO reviewed 1inch Network (1inch Fusion v1) on 28 Dec 2022: 23 findings, 0 critical; 6 marked fixed, 17 acknowledged.

No open critical findings
Open the reportOpen 1inch Network’s security record

Report hosted on audits.oxor.io.

Trustblock does not review code.

Findings23

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High051
Medium033
Low092
HighpodCallGasLimit can not be customized in ERC20PodsAcknowledged

The report gives no description here.

HighThere is no possibility to customize _POD_CALL_GAS_LIMIT in DelegatedShareAcknowledged

The report gives no description here.

HighThere is no validation of maxUserFarms in RewardableDelegationPodAcknowledged

The report gives no description here.

HighThere is no validation of podCallGasLimit_ in ERC20PodsAcknowledged

The report gives no description here.

HighThere is no value for maxLoss in the constructor of the St1Inch contractAcknowledged

The report gives no description here.

MediumIncorrect comparison in WhitelistRegistryAcknowledged

The report gives no description here.

MediumPod is not removed after withdrawal of all tokens from St1InchAcknowledged

The report gives no description here.

MediumThe promote function is not authorized in WhitelistRegistryAcknowledged

The report gives no description here.

LowIt is possible to call _mint with zero value in St1InchAcknowledged

The report gives no description here.

LowOrders with fee can be reverted in SettlementAcknowledged

The report gives no description here.

Show 7 more
LowPromoted address can not be removed in WhitelistRegistryAcknowledged

The report gives no description here.

LowrateBump is not calculated in testsAcknowledged

The report gives no description here.

LowRedundant allowance after resolve of the order in SettlementAcknowledged

The report gives no description here.

LowThe delegate function does not revert when prevDelegatee equals new delegatee in BasicDelegationPodAcknowledged

The report gives no description here.

LowThe withdraw and withdrawTo functions do not revert when lock amount equals 0 in St1inchAcknowledged

The report gives no description here.

LowThere is a possibility of overflow in SettlementAcknowledged

The report gives no description here.

LowThere is no validation of variables in SettlementAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (44)

  • https://github.com/1inch/erc20-pods/contracts/mocks/PodMock.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/Settlement.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/helpers/ResolverMetadata.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/erc20-pods/contracts/mocks/ERC20PodsMock.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/ProxySettlement.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/interfaces/ISettlement.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/helpers/WhitelistHelper.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/interfaces/IResolver.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/FeeBankCharger.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/DynamicSuffix.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/Address.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/interfaces/IFeeBankCharger.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/ResolverMock.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/helpers/VotingPowerCalculator.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/RewardableDelegationPodWithVotingPowerMock.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/erc20-pods/contracts/interfaces/IPod.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/TokensAndAmounts.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/erc20-pods/contracts/Pod.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/erc20-pods/contracts/mocks/WrongPodMock.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/WhitelistRegistrySimple.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/RewardableDelegationPodWithVotingPower.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/helpers/St1inchPreview.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/erc20-pods/contracts/interfaces/IERC20Pods.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/St1inchMock.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/BasicDelegationPodWithVotingPower.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/OrderSuffix.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/FeeBank.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/interfaces/IFeeBank.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/TakingFee.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/delegating/contracts/DelegatedShare.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c
  • https://github.com/1inch/delegating/contracts/interfaces/IRewardableDelegationPod.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/OrderSaltParser.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/interfaces/IVotable.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/St1inch.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/OrderSaltParserMock.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/delegating/contracts/BasicDelegationPod.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c
  • https://github.com/1inch/erc20-pods/contracts/libs/ReentrancyGuard.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/GovernanceMothership.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/WhitelistRegistry.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/SettlementMock.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/erc20-pods/contracts/ERC20Pods.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/delegating/contracts/interfaces/IDelegatedShare.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c
  • https://github.com/1inch/delegating/contracts/RewardableDelegationPod.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c
  • https://github.com/1inch/delegating/contracts/interfaces/IDelegationPod.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c

Part of 1inch Network’s security record

1inch Network
Audits42 audits by 13 firmsLast audit Jul 2026, by Hexens.
Critical findings2 open critical findingsReported in “1inch Liquidity Protocol” by Consensys, Dec 2020. Not marked fixed in that report.
IncidentIncident 6 Mar 2025Source: De.Fi incident database.
Open 1inch Network’s security record

Security firm

OXORIO

6 projects reviewed · 15 reports · latest Dec 2024

See OXORIO’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us