1inch Network security record

As of 30 Oct 2026, 1inch Network has 42 audit reports by 13 security firms on Trustblock; the latest is by Hexens, dated 2 Jul 2026. Those reports list 2 open critical findings. It also holds 1 deployed contract on 1 chain and 1 incident (latest 6 Mar 2025).

Critical findings
2 open critical findings
Reported in “1inch Liquidity Protocol” by Consensys, Dec 2020. Not marked fixed in that report. See the findings
Incident
Incident 6 Mar 2025
Source: De.Fi incident database. 6 audits have been published since. See the incident
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits42

Newest first

AuditSecurity firmDateScopeCritical findingsReport
1inch security reviewSecurity firm: HexensDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
1inch security reviewSecurity firm: HexensDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
1inch Crosschain security reviewSecurity firm: HexensDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
1inch Crosschain security reviewSecurity firm: HexensDate: Scope: Not recorded (see the report)1 critical finding, fixedOpen · GitHub
1inch Crosschain security reviewSecurity firm: HexensDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
1inch FusionSecurity firm: QuantstampDate: Scope: Files named in the reportNo open critical findingsOpen · certificate.quantstamp.com
1inch Sol security reviewSecurity firm: HexensDate: Scope: Not recorded (see the report)1 critical finding, fixedOpen · GitHub
Cross Chain Swaps AuditSecurity firm: OpenZeppelinDate: Scope: Files named in the reportNo open critical findingsOpen · blog.openzeppelin.com
1inch Settlement Refactor AuditSecurity firm: OpenZeppelinDate: Scope: Files named in the reportNo open critical findingsOpen · blog.openzeppelin.com
1inch Limit Order and Aggregation Protocols Diff ASecurity firm: OpenZeppelinDate: Scope: Files named in the reportNo open critical findingsOpen · blog.openzeppelin.com
1inch Limit Order Protocol Diff AuditSecurity firm: OpenZeppelinDate: Scope: Files named in the reportNo open critical findingsOpen · blog.openzeppelin.com
1inch Aggregation Protocol Diff AuditSecurity firm: OpenZeppelinDate: Scope: Files named in the reportNo open critical findingsOpen · blog.openzeppelin.com
1inch Limit Order Settlement AuditSecurity firm: OpenZeppelinDate: Scope: Files named in the reportNo open critical findingsOpen · blog.openzeppelin.com
1inch Fusion V2 auditSecurity firm: DecurityDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
1inch Cross Chain Swaps auditSecurity firm: DecurityDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
1inch security reviewSecurity firm: HexensDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
1inch Limit Order Settlement Phase II auditSecurity firm: ABDK ConsultingDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
1inch Limit Order Settlement auditSecurity firm: ABDK ConsultingDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
1inch Fusion v1Security firm: OXORIODate: Scope: Repository at commit f975e2eNo open critical findingsOpen · audits.oxor.io
1inch – Limit OrderSecurity firm: ChainSecurityDate: Scope: Files named in the reportNo open critical findingsOpen · chainsecurity.com
1inch – DelegationSecurity firm: ChainSecurityDate: Scope: Files named in the reportNo open critical findingsOpen · chainsecurity.com
1inch – ERC20Security firm: ChainSecurityDate: Scope: Files named in the reportNo open critical findingsOpen · chainsecurity.com
1inch Aggregation Router V5 auditSecurity firm: ABDK ConsultingDate: Scope: Not recorded (see the report)2 critical findings, fixedOpen · GitHub
1inch Smart Contract Review (2nd iteration)Security firm: ZokyoDate: Scope: Files named in the reportNo open critical findingsOpen · IPFS
1inch Exchange AggregationRouter V5Security firm: ConsensysDate: Scope: Files named in the reportNo open critical findingsOpen · diligence.security

Findings474

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical205
High31922
Medium172943
Low50136148
HighvalidateImmutables won’t work on zkSync1inch Cross Chain Swaps audit · Decurity · 15 Mar 2024Acknowledged

The report gives no description here.

Open the report
HighPreventing low-level technical errors, such as overflows, via high-level business constraints is a bad practice, as such relations are non obvious and could be broken unintentional1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
HighUnclear behavior in FusionDetails.sol1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
HighOverflow/Underflow in Settlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
HighSuboptimal in OrderSaltParser.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
HighSuboptimal in WhitelistRegistry.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
HighpodCallGasLimit can not be customized in ERC20Pods1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
HighThere is no possibility to customize _POD_CALL_GAS_LIMIT in DelegatedShare1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
HighThere is no validation of maxUserFarms in RewardableDelegationPod1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
HighThere is no validation of podCallGasLimit_ in ERC20Pods1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
Show 10 more
HighThere is no value for maxLoss in the constructor of the St1Inch contract1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
HighUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
HighUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
HighCentralization RiskAcknowledged

In the contract `ERC1155Proxy`, the role `immutableOwner` has the authority over the following function: - `func_301JL5R()`, which transfers tokens in an ERC1155 contract. Any compromise to the `immutableOwner` account may allow the hacker to take advantage of this and gain unauthorized access to token transfers.

HighCentralization RiskAcknowledged

In the contract `ERC721Proxy`, the role `immutableOwner` has the authority over the following function: - `func_602HzuS()`, which transfers NFT tokens in an ERC721 contract. Any compromise to the `immutableOwner` account may allow the hacker to take advantage of this and gain unauthorized access to token transfers.

HighCentralization RiskAcknowledged

In the contract `ERC721ProxySafe`, the role `immutableOwner` has the authority over the following function: - `func_602HzuS()`, which transfers NFT tokens in an ERC721 contract. Any compromise to the `immutableOwner` account may allow the hacker to take advantage of this and gain unauthorized access to token transfers.

HighUntitled findingAcknowledged

The report gives no description here.

HighUntitled findingAcknowledged

The report gives no description here.

HighUntitled findingAcknowledged

The report gives no description here.

MediumMissing Overflow Check on Timelocks Allows Escrow Lockout1inch Crosschain security review · Hexens · 5 Aug 2025Acknowledged

The report gives no description here.

Open the report
Show 10 more
MediumMissing Timelock Ordering Validation Allows Malicious Order Creation1inch Crosschain security review · Hexens · 5 Aug 2025Acknowledged

The report gives no description here.

Open the report
MediumPotential Bypass of Fees Parameters in Order Creation1inch Fusion · Quantstamp · 24 Mar 2025Acknowledged

In the `Create` context of the fusion-swap program, makers are required to specify protocol fee and integrator fee parameters as well as their corresponding associated token accounts (protocol_dst_ata and integrator_dst_ata). However, the current implementation does not enforce these parameters strictly. This means that a maker can potentially create an order without setting protocol or integrator fees or by misconfiguring the protocol_dst_ata. Consequently, the maker might avoid fee deductions and receive a higher net amount than intended by the protocol fee design. Note that even if the UI enforces fee parameters, malicious makers could bypass these checks by directly interacting with the program. While this issue might be less impactful because takers (or resolvers) must be whitelisted by the protocol and are incentivized to fill only orders with correct fee configurations, it still poses a risk. In practice, resolvers may refuse to fill orders that do not have fees applied to the correct token accounts, but the absence of on-chain enforcement or fixed values allows makers to manipulate these parameters.

Open the report
MediumPotential Surplus Fee Bypass via Inflated `estimated_dst_amount` in `get_fee_amounts()`1inch Fusion · Quantstamp · 24 Mar 2025Acknowledged

In the `get_fee_amounts()` function of the fusion-swap program, surplus fees are conditionally applied based on the comparison between the calculated destination amount (after applying the Dutch auction adjustments and subtracting the protocol and integrator fees) and the user-supplied `estimated_dst_amount`. Specifically, the surplus fee is added only if the adjusted destination amount exceeds the `estimated_dst_amount`. This design allows a maker to avoid the impact of surplus fees by setting the `estimated_dst_amount` to an excessively high value relative to `min_dst_amount`. As a result, the condition to trigger the surplus fee is never met, and the protocol fee component intended to capture surplus (positive slippage) is effectively bypassed.

Open the report
MediumINSECURE RESCUE MECHANISM FOR STUCK TOKENS1inch security review · Hexens · 6 Nov 2023Acknowledged

The report gives no description here.

Open the report
MediumMAKING AN UNLIMITED APPROVAL FOR UNOSWAPROUTER TO ANY ADDRESS1inch security review · Hexens · 6 Nov 2023Acknowledged

The report gives no description here.

Open the report
MediumOverflow, underflow, and division by zero are possible here.1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
MediumThis could read after “extraData”.1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
MediumOverflow/Underflow in Settlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
MediumOverflow/Underflow in Settlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
MediumOverflow/Underflow in Settlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
Show 10 more
MediumOverflow/Underflow in Settlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
MediumOverflow/Underflow in VotingPowerCalculator.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
MediumSuboptimal in BasicDelegationPod.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
MediumSuboptimal in BasicDelegationPod.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
MediumSuboptimal in ERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
MediumSuboptimal in VotingPowerCalculator.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
MediumUnclear behavior in Settlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
MediumIncorrect comparison in WhitelistRegistry1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
MediumPod is not removed after withdrawal of all tokens from St1Inch1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
MediumThe promote function is not authorized in WhitelistRegistry1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
Show 10 more
MediumStaking Does Not Prevent Misbehavior1inch – Limit Order · ChainSecurity · 19 Dec 2022Acknowledged

The report gives no description here.

Open the report
MediumUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
MediumUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
MediumUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
MediumUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
MediumPotential Reentrancy AttackAcknowledged

A reentrancy attack can occur when the contract creates a function that makes an external call to another untrusted contract before resolving any effects. If the attacker can control the untrusted contract, they can make a recursive call back to the original function, repeating interactions that would have otherwise not run after the external call resolved the effects.

MediumPotential Reentrancy AttackAcknowledged

A reentrancy attack can occur when the contract creates a function that makes an external call to another untrusted contract before resolving any effects. If the attacker can control the untrusted contract, they can make a recursive call back to the original function, repeating interactions that would have otherwise not run after the external call resolved the effects.

MediumUntitled findingAcknowledged

The report gives no description here.

LowDirection not enforced for 1->0-only adjustment instructions1inch security review · Hexens · 9 Mar 2026Acknowledged

The report gives no description here.

Open the report
LowFee-on-Transfer Tokens Cause Accounting Mismatch and Maker Loss1inch security review · Hexens · 9 Mar 2026Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowToken pair not bound when direction-only validation is used1inch security review · Hexens · 9 Mar 2026Acknowledged

The report gives no description here.

Open the report
LowThe order and escrow are not closed after the escrow is rescued1inch Crosschain security review · Hexens · 11 Jul 2025Acknowledged

The report gives no description here.

Open the report
LowConsider Validating the `authority` of the `taker_src_ata` Account1inch Fusion · Quantstamp · 24 Mar 2025Acknowledged

The protocol does not enforce the `authority` constraint on the `taker_src_ata` account. This allows the taker to provide any account as long as the `mint` constraint is correct, which can lead to fund loss if an incorrect address is provided.

Open the report
LowImproper Slippage Handling1inch Fusion · Quantstamp · 24 Mar 2025Acknowledged

The protocol allows the maker to set a `min_dst_amount` during order creation. By definition, this amount represents the minimum destination tokens the maker is willing to receive in exchange for source tokens. However, the protocol currently uses this amount to calculate exchange rates via the `get_dst_amount()` function and then deducts fees from the calculated amount using the `get_fee_amounts()` function. However, under certain conditions—particularly when the calculated fees (protocol, integrator, and surplus) exceed the bump provided by the Dutch auction—the resulting destination amount for the maker may fall below the intended `min_dst_amount`. This behavior effectively breaks the slippage protection mechanism. Makers expect `min_dst_amount` to represent the minimum amount of destination tokens they will receive, but due to the fee calculations, they may receive less than this minimum.

Open the report
LowLack of Monotonicity Enforcement in Dutch Auction Rate Bumps1inch Fusion · Quantstamp · 24 Mar 2025Acknowledged

The protocol documentation specifies that the auction operates on a Dutch auction model, where the price is expected to decline over time. However, in the `calculate_rate_bump()` function in `fusion-swap/src/dutch_auction.rs`, there is no check to ensure that the rate bumps specified by the user in `points_and_time_deltas` are in a strictly declining order. This omission allows a user to supply rate bump values that could be non-monotonic (i.e., a subsequent bump could be higher than a previous one), which contradicts the intended Dutch auction behavior and the protocol documentation.

Open the report
LowMissing Input Validation1inch Fusion · Quantstamp · 24 Mar 2025Acknowledged

The fusion-swap program currently allows makers to supply fee parameters via the `ReducedFeeConfig` and rate bump values in the Dutch auction data without performing explicit bound checks. Unlike the surplus fee—which is validated to be less than `BASE_1E2`—there is no on-chain validation to ensure that: - The protocol fee and integrator fee values (or their sum) are within a reasonable range (e.g., less than or equal to `BASE_1E5`). Without this check, makers could specify arbitrarily high fees, potentially leading to unintended pricing behavior and potential underflow when substracting the fees from the `dst_amount`. - The rate bumps provided in the Dutch auction parameters are within an acceptable range relative to `BASE_1E5`. This extra validation would help prevent overflow in the `calculate_rate_bump()` function and ensure that the auction price adjustment behaves as intended.

Open the report
LowIncomplete expiration_time check allows orders to be instantly expired1inch Sol security review · Hexens · 21 Feb 2025Acknowledged

The report gives no description here.

Open the report
LowMaker and taker assets can be identical1inch Sol security review · Hexens · 21 Feb 2025Acknowledged

The report gives no description here.

Open the report
LowProtocol fee associated token account is not checked against a configured account1inch Sol security review · Hexens · 21 Feb 2025Acknowledged

The report gives no description here.

Open the report
LowSelf-exchange is possible1inch Sol security review · Hexens · 21 Feb 2025Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowFloating PragmaCross Chain Swaps Audit · OpenZeppelin · 14 Nov 2024Acknowledged

The report gives no description here.

Open the report
LowGas OptimizationCross Chain Swaps Audit · OpenZeppelin · 14 Nov 2024Acknowledged

The report gives no description here.

Open the report
LowMakers May Profit off of Takers via Malicious makerPermit Extension1inch Limit Order Protocol Diff Audit · OpenZeppelin · 23 May 2024Acknowledged

The report gives no description here.

Open the report
LowProcedural in DynamicSuffix.sol1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
LowProcedural in FeeBank.sol1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
LowProcedural in FeeBankCharger.sol1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
LowProcedural in Settlement.sol1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
LowSpecifying as particular version makes it harder to migrate to newer versions.1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in FeeBank.sol1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
LowThe function always returns true and the semantics of the returned value is unclear.1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowThis error gives no clue regarding which particular address is zero.1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
LowWe didn’t review this file.1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
LowWe didn’t review this file.1inch Limit Order Settlement Phase II audit · ABDK Consulting · 19 Jun 2023Acknowledged

The report gives no description here.

Open the report
LowBad datatype in ERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowBad datatype in IERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowBad datatype in IERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowBad datatype in IERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowDocumentation in FeeBankCharger.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowDocumentation in IResolver.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowDocumentation in ISettlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowDocumentation in RewardableDelegationPod-1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowDocumentation in Settlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowDocumentation in WhitelistRegistry.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowDocumentation in WhitelistRegistry.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowOverflow/Underflow in Settlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowProcedural in ERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowProcedural in IDelegatedShare.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowProcedural in ISettlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowProcedural in St1inch.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowProcedural in WhitelistRegistry.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowReadability in ERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowReadability in Settlement.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in ERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in ERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in ERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in ERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in ERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in ERC20Pods.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in FeeBank.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in FeeBankCharger.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowSuboptimal in FeeBankCharger.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in IDelegatedShare.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in IDelegationPod.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in St1inch.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in St1inch.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in St1inch.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in WhitelistRegistry.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowSuboptimal in WhitelistRegistry.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowUnclear behavior in DynamicSuffix.sol1inch Limit Order Settlement audit · ABDK Consulting · 28 Feb 2023Acknowledged

The report gives no description here.

Open the report
LowIt is possible to call _mint with zero value in St1Inch1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowOrders with fee can be reverted in Settlement1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowPromoted address can not be removed in WhitelistRegistry1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowrateBump is not calculated in tests1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowRedundant allowance after resolve of the order in Settlement1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowThe delegate function does not revert when prevDelegatee equals new delegatee in BasicDelegationPod1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowThe withdraw and withdrawTo functions do not revert when lock amount equals 0 in St1inch1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowThere is a possibility of overflow in Settlement1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowThere is no validation of variables in Settlement1inch Fusion v1 · OXORIO · 28 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowConsistency on Zero Amount Transfers1inch – ERC20 · ChainSecurity · 19 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowMissing Events1inch – Limit Order · ChainSecurity · 19 Dec 2022Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowSide Effects of _updateBalances()1inch – ERC20 · ChainSecurity · 19 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowZero Address Consistency in AddressArray1inch – ERC20 · ChainSecurity · 19 Dec 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowUntitled finding1inch Aggregation Router V5 audit · ABDK Consulting · 16 Sep 2022Acknowledged

The report gives no description here.

Open the report
LowInefficient Transfer HookAcknowledged

The report gives no description here.

LowInsufficient DocumentationAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

Show 10 more
LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

Show 10 more
LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

Show 10 more
LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

Show 4 more
LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

LowUntitled findingAcknowledged

The report gives no description here.

Incidents1

Attached through a shared contract address. Our incident data ends in Oct 2026.

Incident

Incident,

Source: De.Fi incident database.

Audits before it
36.
Audits since
6, the latest dated 2 Jul 2026.

Contracts1

AddressChainSource code
0x111111111117dc0aa78b770fa6a738034120c302Chain: EthereumSource code: Verified source

All 1 address and the files the reports name

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="1inch"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us