web3 / news / / Decrypt
TrustedVolumes, a liquidity provider used by multiple DeFi protocols, was hit by an exploit that has so far drained around $6.7 million in funds.
TrustedVolumes lost $6.7 million due to flaws in its custom RFQ swap proxy contract.
KEY POINTS
- The attacker was identified as the same entity behind the March 2025 1inch Fusion V1 incident.
- Permissionless signer registration, broken replay protection, and unvalidated transfer source enabled the exploit.
- Funds were laundered through no-KYC exchange ChangeNow before being swapped to ETH.
- Experts warn the attack could have repeatedly drained more accounts if not detected.
COMPANIES
Summarized by Newsio from Decrypt. How we summarize →