Blockaid reports $6.7 Million TrustedVolumes hack

Key points:

• TrustedVolumes suffered a hacker attack that resulted in up to $6.7 million in stolen crypto assets.
• Blockaid believes the exploit may be linked to the same attacker behind the 1inch Fusion V1 hack.

Blockchain security company Blockaid, which works with DEX aggregator 1inch, has reported a hacker attack targeting TrustedVolumes. Initial estimates suggest the attackers have already stolen around $5.87 million in digital assets.

According to a post published by Blockaid on X, the issue is tied to the TrustedVolumes resolver contract on Ethereum. The stolen assets include 1,291 WETH, 206,000 USDT, nearly 17 WBTC, and about 1.27 million USDC.

Source: X.com

The company believes the attack was carried out by the same hacker responsible for the March 2025 exploit of 1inch Fusion V1, which resulted in losses of around $5 million. However, Blockaid noted that the current incident is linked to a different vulnerability involving TrustedVolumes’ custom RFQ proxy.

TrustedVolumes Raises Loss Estimate to $6.7 Million

TrustedVolumes later confirmed the exploit and updated the estimated losses to approximately $6.7 million. The company also said it is considering launching a bug bounty program to help resolve the issue more quickly.

1inch separately stated that the incident did not affect its infrastructure or user funds. The company added:

“TrustedVolumes operates independently as a liquidity provider and is used by multiple protocols, not just 1inch. We continue to monitor the situation and assist with the investigation.”

Attacks targeting DeFi projects have increased significantly over the past month. Among the largest recent incidents were the $285 million attack on Drift and the Kelp DAO vulnerability, which resulted in losses of $293 million.

According to DefiLlama, crypto projects lost around $635.2 million to hacks and exploits in April alone. That marks the highest monthly total since February 2025, when Bybit suffered losses of nearly $1.5 billion. The TrustedVolumes incident became the fifth major hack reported since the beginning of May.