Hack history / 2024 / Hack or exploit
1inch Swap
Hack or exploit on Oct 31, 2024 · Supply Chain Attack
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$723K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,033
among thefts by dollars lost
What happened
On October 30, 2024, attackers phished a LottieFiles npm account and published malicious lottie-player versions that injected an Ace Drainer wallet-connect prompt into every downstream site, including the 1inch web dApp. The 1inch frontend lacked npm package pinning or integrity checks, leaving it vulnerable to upstream compromise. One user lost 10 wrapped BTC ($723K) from an Avalanche wallet; only the web frontend was affected.
Details
- Date
- Oct 31, 2024
- Kind
- Hack or exploit
- Method
- Supply Chain Attack
- How in
- Keys, accounts and infrastructure
- Target
- DeFi protocol
- Chains
- Avalanche
Reported by
Related incidents
CoW Swap 2026 · Hack or exploit · $1.2M
Trader loses almost $50 million in Aave swap gone wrong 2026 · Costly mistake or other · $50M
1inch Swap 2025 · Hack or exploit · $5M
1inch 2024 · Hack or exploit · undisclosed
WOOFi Swap 2024 · Hack or exploit · $8.8M
Trader loses almost $50 million in Aave swap gone wrong 2026 · Costly mistake or other · $50M
1inch Swap 2025 · Hack or exploit · $5M
1inch 2024 · Hack or exploit · undisclosed
WOOFi Swap 2024 · Hack or exploit · $8.8M
Cite this page
SwanBluechip, "1inch Swap hack, Oct 31, 2024: $723K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htde96e59cab/ (data as of 2026-10-31).