Hack history / 2026 / Hack or exploit
TrustedVolumes
Hack or exploit on May 7, 2026 · Caller Impersonation
SOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$6.7M
sources: $5.9M to $6.7M
Returned
none listed
as the sources state it
Rank
#394
among thefts by dollars lost
What happened
An attacker exploited missing access control in TrustedVolumes' RFQ swap proxy to add themselves to the order signer allowlist, forge trade orders, and drain funds across 85 transactions in WETH, WBTC, USDT, and USDC.
Details
- Date
- May 7, 2026
- Kind
- Hack or exploit
- Method
- Caller Impersonation
- How in
- Smart contract bug
- Target
- Other
- Chains
- Ethereum
After the theft
- Returned by the attacker
- yes, amount not stated
“1inch confirmed its protocol, infrastructure, and user funds are unaffected.In July 2026, the attacker returned ~1,122 ETH (~$2M) while keeping a similar amount as bounty.” (SlowMist Hacked)
Related incidents
Purrlend 2026 · Hack or exploit · $1.5M
Stake DAO Yield 2026 · Hack or exploit · $176K
INK Finance 2026 · Hack or exploit · $140K
Stake DAO Yield 2026 · Hack or exploit · $176K
INK Finance 2026 · Hack or exploit · $140K
Cite this page
SwanBluechip, "TrustedVolumes hack, May 7, 2026: $6.7M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htdb1d7b6a3f/ (data as of 2026-10-31).