Markets
A 1inch Liquidity Provider Lost $6.7 Million Because Its Allowlist Function Had No Access Control — and the Attacker Is the Same One That Drained $5 Million in 2025
TrustedVolumes, a market maker resolving orders for 1inch Fusion, was drained across 85 transactions on May 7 after an attacker added themselves to the contract's signer allowlist — a function any wallet could call.
·James Gray