1inch Advances DeFi Security With Biannual Bug Bounty Transparency Reports

1inch Network has unveiled a biannual bug bounty reporting initiative developed in partnership with HackenProof, with the inaugural publication inspecting the Aqua program and first-half 2026 bounty actions.
The emergence of institutional-grade decentralized finance represents a major growth as conventional monetary establishments more and more take part within the digital asset market. Nevertheless, establishing belief continues to current a considerable problem. In response, 1inch has pursued a number of transparency and safety measures, together with a lately up to date second version of its Risk Management Whitepaper, ISO and SOC 2 certifications, and the newly launched biannual bug bounty report sequence.
Each installment of the reporting sequence will study a selected program or operational area, providing the neighborhood expanded context relating to operational mechanisms and potential vulnerability areas. The publications can even embrace supplementary technical particulars designed to help safety researchers in optimizing their contributions to the ecosystem.
Aqua Program: Security Architecture for Shared Liquidity
During the primary half of 2026, 1inch’s six main HackenProof bug bounty packages collectively obtained 1,055 submissions from safety researchers, leading to 32 validated payouts distributed throughout varied severity classifications. The 1inch Smart Contract program generated 267 studies from 122 researchers, yielding three paid findings.
The 1inch Wallet program produced 85 studies from 67 researchers, with six leading to compensation. The 1inch Web initiative obtained 68 studies from 45 researchers, main to at least one paid report. The 1inch Business program accounted for 111 studies from 89 researchers, with 9 validated payouts. The 1inch Infrastructure program drew 52 studies from 45 researchers, producing 4 paid findings. The Aqua program attracted the best engagement, with 472 studies submitted by 217 researchers, 9 of which obtained rewards.
The preliminary report supplies complete evaluation of Aqua, 1inch’s lately launched shared liquidity layer, which the corporate describes as the primary of its variety. Since its public launch, Aqua has demonstrated speedy adoption, exceeding $100 million in transaction quantity inside weeks. The platform’s safety basis, nevertheless, was established by intensive pre-launch scrutiny, with its HackenProof bug bounty program attracting substantial researcher consideration and contributing to product safety from inception.
The Aqua Bug Bounty program recorded important neighborhood participation, with 472 submissions from 217 researchers addressing vulnerabilities throughout a number of severity ranges. Nine vulnerabilities certified for rewards on this reporting interval, encompassing one high-severity subject alongside a number of medium and low-severity findings.
The recognized points included logic inconsistencies, unit mismatches, execution edge instances, and tooling-related issues. All reported vulnerabilities have since been remediated, enhancing protocol stability and safety.
“Institutional-grade DeFi requires proactively adopting requirements that go previous what’s prescribed,” feedback Sergej Kunz, co-founder of 1inch in a written assertion. “The trade must transcend the minimal to make sure merchandise are safe and dependable. With Aqua, as with all our merchandise, we put a number of layers of checks and testing in place from the beginning, and bug bounties are a key a part of that strategy,” he added.
“Aqua’s strategy to safety highlights the worth of constructing safety an ongoing a part of product growth,” mentioned Alex Horlan, CTO of HackenProof in a written assertion. “Its bug bounty program supplies steady visibility into potential safety dangers because the product evolves, serving to the crew strengthen the protocol and cut back the chance of expensive safety incidents,” he added.
The publish 1inch Advances DeFi Security With Biannual Bug Bounty Transparency Reports appeared first on Metaverse Post.
