1inch Fusion v1

OXORIORepository at commit f975e2e

Audit

OXORIO reviewed 1inch Network (1inch Fusion v1) on 28 Dec 2022: 23 findings, 0 critical; 6 marked fixed, 17 acknowledged.

No open critical findings
Open the reportOpen 1inch Network’s security record

Report hosted on audits.oxor.io.

Trustblock does not review code.

Findings23

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High051
Medium033
Low092
HighThere is no value for feeReceiver in the constructor in St1InchFixed

The report gives no description here.

MediumfeeReceiver can be zero address in St1InchFixed

The report gives no description here.

MediumThere is no validation of promoted addresses in WhitelistRegistryFixed

The report gives no description here.

MediumThere is no validation that Pod has a valid token in ERC20Pods.Fixed

The report gives no description here.

LowThe _DEFAULT_INITIAL_RATE_BUMP and _DEFAULT_DURATION constants are not used in SettlementFixed

The report gives no description here.

LowThere is no validation of constructor parameters in FeeBankFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (44)

  • https://github.com/1inch/erc20-pods/contracts/mocks/PodMock.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/Settlement.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/helpers/ResolverMetadata.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/erc20-pods/contracts/mocks/ERC20PodsMock.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/ProxySettlement.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/interfaces/ISettlement.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/helpers/WhitelistHelper.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/interfaces/IResolver.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/FeeBankCharger.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/DynamicSuffix.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/Address.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/interfaces/IFeeBankCharger.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/ResolverMock.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/helpers/VotingPowerCalculator.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/RewardableDelegationPodWithVotingPowerMock.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/erc20-pods/contracts/interfaces/IPod.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/TokensAndAmounts.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/erc20-pods/contracts/Pod.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/erc20-pods/contracts/mocks/WrongPodMock.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/WhitelistRegistrySimple.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/RewardableDelegationPodWithVotingPower.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/helpers/St1inchPreview.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/erc20-pods/contracts/interfaces/IERC20Pods.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/St1inchMock.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/BasicDelegationPodWithVotingPower.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/OrderSuffix.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/FeeBank.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/interfaces/IFeeBank.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/TakingFee.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/delegating/contracts/DelegatedShare.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c
  • https://github.com/1inch/delegating/contracts/interfaces/IRewardableDelegationPod.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c
  • https://github.com/1inch/limit-order-settlement/contracts/libraries/OrderSaltParser.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/interfaces/IVotable.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/St1inch.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/OrderSaltParserMock.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/delegating/contracts/BasicDelegationPod.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c
  • https://github.com/1inch/erc20-pods/contracts/libs/ReentrancyGuard.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/GovernanceMothership.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/WhitelistRegistry.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/limit-order-settlement/contracts/mocks/SettlementMock.sol at commit a6a811ac1eb76f545551e32c1756c52de03b9113
  • https://github.com/1inch/erc20-pods/contracts/ERC20Pods.sol at commit f975e2eaec9714e66163c1826044f722660a14a2
  • https://github.com/1inch/delegating/contracts/interfaces/IDelegatedShare.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c
  • https://github.com/1inch/delegating/contracts/RewardableDelegationPod.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c
  • https://github.com/1inch/delegating/contracts/interfaces/IDelegationPod.sol at commit 9a243d64422c41b0631617466deeb85dcd92e57c

Part of 1inch Network’s security record

1inch Network
Audits42 audits by 13 firmsLast audit Jul 2026, by Hexens.
Critical findings2 open critical findingsReported in “1inch Liquidity Protocol” by Consensys, Dec 2020. Not marked fixed in that report.
IncidentIncident 6 Mar 2025Source: De.Fi incident database.
Open 1inch Network’s security record

Security firm

OXORIO

6 projects reviewed · 15 reports · latest Dec 2024

See OXORIO’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us