trustedvolumes

According to monitoring by Shield, the TrustedVolumes attackers have transferred and laundered $278,000: depositing 10.2 ETH ($23,600) into TornadoCash, cross-chain converting 110 ETH ($250,000) to BTC through THORChain, and attempted to deposit 0.5 ETH into Railgun but changed their mind and withdrew it.TrustedVolumes was attacked on May 7, resulting in a loss of approximately $6.7 million.

TrustedVolumes confirmed on platform X that it has been attacked, disclosing that the stolen funds are currently stored in three addresses, totaling approximately 6.7 million USD. Two of the addresses hold about 3 million USD in assets each, while the other address holds about 700,000 USD in assets. At the same time, TrustedVolumes expressed its willingness to engage in constructive communication with the attacker regarding a bounty for the vulnerability and a mutually acceptable solution.

1inch posted on platform X, stating that it has noted reports involving TrustedVolumes and confirmed that 1inch and all its protocols are not involved in the incident. The 1inch system, infrastructure, and user funds have not been affected.TrustedVolumes operates independently as a liquidity provider and is used by multiple protocols in the industry, not exclusive to 1inch. 1inch will continue to monitor the situation and actively assist relevant security parties when appropriate.

According to Blockaid's monitoring, its vulnerability detection system found that the 1inch market maker/parser TrustedVolumes is under attack, involving the Ethereum network. The victim contract is the TrustedVolumes parser, which has so far extracted approximately $5.87 million, including 1,291.16 WETH, 206,282 USDT, 16.939 WBTC, and 1,268,771 USDC.Blockaid stated that the attacker is the same operator as in the 1inch Fusion V1 attack incident in March 2025, but this vulnerability is different, located in the custom RFQ trading agent contract controlled by TrustedVolumes. More details will be announced soon.

According to Arkham data, at 20:18, 16.7621 million 1INCH (worth approximately $2.2729 million) was transferred from TrustedVolumes to the deposit address of HitBTC. Subsequently, that address transferred 17.4569 million 1INCH to HitBTC.