GuShiio.com learned that according to Decurity’s post-event report, after negotiating with the hackers, most of the US$5 million stolen by 1inch had been returned, and the hackers retained part of it as a vulnerability bounty. The attack originated from a vulnerability in the Fusion v1 smart contract. The main affected were the use of outdated versions of the parser, and the funds of ordinary users were not affected.
read the original