Exploit of TrustedVolumes RFQ resolver siphons roughly $6M from 1inch-linked market maker, raising DeFi alarm

TrustedVolumes, a liquidity provider and market maker associated with 1inch, was exploited on May 7, 2026, with reported losses ranging from roughly $5.87 million to $6.7 million in wrapped tokens and stablecoins ^{[1] [2] [3] [4]}.

Security firm Blockaid reported the attacker used a vulnerability in TrustedVolumes’ resolver / RFQ swap proxy contract and linked the address to a prior 1inch Fusion-related hack; on-chain reporting lists drained assets including WETH, USDT, WBTC and USDC ^{[1] [3] [4]}.

Observers say the exploit adds to a string of DeFi breaches in early May and has renewed scrutiny of resolver contracts and custom per-request swap infrastructure used by aggregators and market makers ^{[2] [3]}.

Reported loss totals differ between outlets as investigators and security firms continue on-chain analysis; Blockaid’s linkage to a recurring threat actor was highlighted in initial reports ^{[1] [3]}.