$6.7 Million DeFi Security Breach Exposes TrustedVolumes Vulnerabilities

A significant security breach has been reported in the decentralized finance (DeFi) sector, with TrustedVolumes, a widely-used liquidity provider, losing approximately $6.7 million in crypto assets.

The attack targeted a resolver contract operated by TrustedVolumes on the Ethereum network, where an attacker exploited technical flaws to drain digital assets.

Security researchers noted that the exploit shares similarities with earlier attacks linked to 1inch Fusion V1, but used a different vulnerability vector. The attacker leveraged weaknesses in TrustedVolumes' custom RFQ swap proxy infrastructure, specifically insufficient validation and flawed authorization controls, to facilitate unauthorized withdrawals.