1inch launches biannual bug bounty report on Aqua with HackenProof
1inch has launched a biannual bug bounty report created with HackenProof, with the first release covering the 1inch Aqua bug bounty program and activity in H1 2026. The report supports the push for institutional-grade DeFi through stronger security processes, including ISO 27001 and SOC 2 (Type 1) attestation, and emphasizes transparency.
Key bug bounty report numbers (Jan–Jun 2026) across 1inch’s six HackenProof programs: 1,055 reports submitted by security researchers, with 32 reports resulting in payouts across severity levels. Breakdown includes 1inch Smart Contract, Wallet, Web, Business, Infrastructure, and Aqua.
Focus on Aqua: Aqua has grown rapidly, surpassing $100m in volume shortly after going public. In the bug bounty report for Aqua, 472 submissions came from 217 researchers. Nine vulnerabilities were rewarded, including one high-severity issue. Reported categories included logic inconsistencies, unit mismatches, execution edge cases, and tooling-related issues. 1inch says all identified vulnerabilities have been resolved.
For traders, this development is a security-validation signal rather than a direct protocol token event, and it may reduce perceived risk as Aqua continues scaling—especially for liquidity and routing strategies reliant on shared liquidity.
Neutral
This is a security and transparency update: 1inch and HackenProof publicize results of a biannual bug bounty report, with Aqua receiving 472 submissions and 9 rewarded vulnerabilities (including one high-severity), all said to be resolved. Such reporting typically improves perceived security and institutional confidence, but it does not introduce a new token mechanic, emissions change, or confirmed exploit that would force immediate repricing.
Historically, similar transparency-driven security disclosures tend to be market-neutral-to-slightly positive for sentiment. After bug bounty findings are resolved, traders often see reduced tail-risk and may reallocate toward the affected protocol—especially for liquidity providers and routing strategies. However, since the article does not announce new incentives, partnerships that change cash flows, or market-moving breaches, the immediate impact on price is usually limited.
Short term: likely neutral, with modest sentiment support for Aqua/1inch liquidity due to demonstrated ongoing auditing.
Long term: mildly constructive if the security program continues and reduces future incident probability, supporting broader adoption and institutional-grade DeFi positioning.