Incident
Incident,
Source: De.Fi incident database.
- Audits before it
- 36.
- Audits since
- 6, the latest dated 2 Jul 2026.
1inch Network security record
As of 30 Oct 2026, 1inch Network has 42 audit reports by 13 security firms on Trustblock; the latest is by Hexens, dated 2 Jul 2026. Those reports list 2 open critical findings. It also holds 1 deployed contract on 1 chain and 1 incident (latest 6 Mar 2025).
Critical findings
2 open critical findings
Reported in “1inch Liquidity Protocol” by Consensys, Dec 2020. Not marked fixed in that report. See the findings
Incident
Incident 6 Mar 2025
Source: De.Fi incident database. 6 audits have been published since. See the incident
Open the latest report
Your label, live
Get the label for your siteRecord last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits42
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| 1inch Smart Contract Review | Security firm: Zokyo | Date: | Scope: Files named in the report | No open critical findings | Open · IPFS |
| 1inch – Farming | Security firm: ChainSecurity | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · chainsecurity.com |
| 1inch Fixed Rate Swap Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | No open critical findings | Open · blog.openzeppelin.com |
| 1inch Limit Order Protocol Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | No open critical findings | Open · blog.openzeppelin.com |
| 1inch - Limit Order | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| 1inch Order Mixin audit | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| 1Inch Limit Order Protocol | Security firm: Pessimistic | Date: | Scope: Files named in the report | No open critical findings | Open · GitHub |
| 1inch Aggregation Router audit | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| 1inch Fixed Rate Swap | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| 1inch Limit Order Protocol audit | Security firm: ABDK Consulting | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| 1inch Exchange Aggregation Protocol v3 | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| 1inch Liquidity Protocol Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | No open critical findings | Original removed |
| 1inch Mooniswap v2 | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| 1inch Liquidity Protocol | Security firm: Consensys | Date: | Scope: Files named in the report | 2 open critical findings | Open · diligence.security |
| 1inch Exchange | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
| 1inch Exchange Audit | Security firm: OpenZeppelin | Date: | Scope: Files named in the report | No open critical findings | Open · blog.openzeppelin.com |
| 1INCH / DEX | Security firm: Hacken | Date: | Scope: 1 address on Ethereum | No open critical findings | Open · hacken.io |
Findings474
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 2 | 0 | 5 |
| High | 3 | 19 | 22 |
| Medium | 17 | 29 | 43 |
| Low | 50 | 136 | 148 |
Marked Informational or Info by the firms. Not counted as findings.
InformationalDecay offset can cause an implicit revert on balanceOut underflow1inch security review · Hexens · 9 Mar 2026Acknowledged
The report gives no description here.
Open the reportInformationalExtruction Instruction Accepts Arbitrary Target Addresses Without Validation1inch security review · Hexens · 9 Mar 2026Acknowledged
The report gives no description here.
Open the reportInformationalStatic Balance Accounting Breaks Rebase Token Support in Aqua1inch security review · Hexens · 9 Mar 2026Acknowledged
The report gives no description here.
Open the reportInformationalThe attempt to charge protocol fee may fail unreasonably1inch security review · Hexens · 9 Mar 2026Acknowledged
The report gives no description here.
Open the reportInformationalToken Invalidators Assume Fixed Balance Semantics1inch security review · Hexens · 9 Mar 2026Acknowledged
The report gives no description here.
Open the reportInformationalrescue_funds Does Not Support Native Escrow1inch Crosschain security review · Hexens · 11 Jul 2025Acknowledged
The report gives no description here.
Open the reportInformationalInaccurate error on underflow1inch Sol security review · Hexens · 21 Feb 2025Acknowledged
The report gives no description here.
Open the reportInformationalMissing events and emits1inch Sol security review · Hexens · 21 Feb 2025Acknowledged
The report gives no description here.
Open the reportInformationalSingle-step ownership transfer to non-Signer may introduce a risk1inch Sol security review · Hexens · 21 Feb 2025Acknowledged
The report gives no description here.
Open the reportInformationalUn-fillable positions may persist due to insufficient fee checks during order creation1inch Sol security review · Hexens · 21 Feb 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
InfoCalculations can be done in unchecked block1inch Fusion V2 audit · Decurity · 2 Apr 2024Acknowledged
The report gives no description here.
Open the reportInfoAn incorrect deployment timestamp may be returned1inch Cross Chain Swaps audit · Decurity · 15 Mar 2024Acknowledged
The report gives no description here.
Open the reportInformationalUNUSED FUNCTIONALITY FROM INHERITED ORDERMIXIN1inch security review · Hexens · 6 Nov 2023Acknowledged
The report gives no description here.
Open the reportInformationalRedundant conversion from address to Address when encoding1inch Crosschain security review · Hexens · 21 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalMissing validation of the mint account in the PublicCancelEscrow context1inch Crosschain security review · Hexens · 5 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalRedundant Instruction Parameters1inch Crosschain security review · Hexens · 5 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalRedundant Native Mint Check in Function cross-chain-escrow-src::cancel_order()1inch Crosschain security review · Hexens · 5 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalRedundant signer Constraint in CancelOrderbyResolver Context1inch Crosschain security review · Hexens · 5 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalInconsistent Order State Management in Partial Rescue Operations1inch Crosschain security review · Hexens · 11 Jul 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect description in Deregister struct1inch Sol security review · Hexens · 21 Feb 2025Fixed
The report gives no description here.
Open the reportShow 2 more
InformationalTODO's in code1inch Sol security review · Hexens · 21 Feb 2025Fixed
The report gives no description here.
Open the reportInformationalNATSPEC FOR TAKERTRAITSLIB LACKS DETAILS1inch security review · Hexens · 6 Nov 2023Fixed
The report gives no description here.
Open the reportIncidents1
Attached through a shared contract address. Our incident data ends in Oct 2026.
Contracts1
| Address | Chain | Source code |
|---|---|---|
| 0x111111111117dc0aa78b770fa6a738034120c302 | Chain: Ethereum | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="1inch"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us