Carbontec Uncovers $520,000 Exploit Path in 1inch Router’s Rescue Function

Description

A Carbontec investigation revealed that over $520,000 in mis-sent tokens were quietly withdrawn from 1inch Routers v4–v6 via public functions, exposing a security blind spot in one of defi’s most widely used contracts. Design Oversight in 1inch Router Allowed Withdrawal of Mis-Sent Funds Blockchain security firm Carbontec has uncovered a significant design vulnerability in 1inch’s