Blockaid detects $5.87mln TrustedVolumes exploit – Here’s what happened!
2026 is proving to be one of DeFi's most difficult years as Blockaid also identifies a new vulnerability.
TrustedVolumes, a 1inch market maker and resolver, was recently hit by an exploit detected by an on-chain security platform, Blockaid.
According to Blockaid, the victim contract was TrustedVolumes’ resolver contract on Ethereum [ETH]. The attacker extracted around $5.87 million, including 1,291.16 WETH, 206,282 USDT, 16.939 WBTC, and 1,268,771 USDC.
Not the first time
In retrospect, this was not the first instance of such an exploit happening. In fact, the attacker was the same operator who had exploited 1inch Fusion V1, which had cost about $5 million just last year, in March 2025.
This time, however, things are a little different. Blockaid pointed out that the ongoing attack involves a different vulnerability pertaining to a custom RFQ (request for quote) proxy that is controlled by TrustedVolumes.
As expected, TrustedVolumes also took to X and noted,
We were recently exploited.
Additionally, the liquidity provider also shared addresses of three wallets holding the stolen funds. $3 million, $3 million, and $700K had been collected by each of the three wallets, respectively.
TrustedVolumes added,
We are open to constructive communication regarding a bug bounty and a mutually acceptable resolution.
Scams are increasing at an alarming rate
Even so, 2026 is only halfway over, and the increase in scams has been startling. As previously reported by AMBCrypto, the DeFi space has already lost almost $770 million so far this year, following a $169 million containment in Q1.
In April alone, there were nearly 30 incidents totaling over $600 million.
Because of this rise in scams, the FBI, Dubai Police Department, and China’s Ministry of Public Security recently worked together to apprehend the hackers.
As a result, the trio was successful in evacuating at least nine scam centers related to cryptocurrency fraud and arresting 276 people.
Final Summary
- $5.87 million was depleted by the TrustedVolumes attack, which included 1,291.16 WETH, 206,282 USDT, 16.939 WBTC, and 1,268,771 USDC.
- The surge in scams indicates that losses are hitting all-time highs in just the first five months of 2026.
