1inch and HackenProof release H1 2026 bug bounty report

1inch has released its bug bounty report for the first half of 2026 in partnership with HackenProof, outlining submission and payout data across its security programs. The report covers the period from January to June 2026 and shows that 1inch’s six core bug bounty programs on HackenProof received 1,055 reports from security researchers. Of those submissions, 32 were rewarded. The report also breaks out figures for the 1inch Aqua bug bounty program, which logged 472 reports from 217 researchers. Nine vulnerabilities in that program received rewards, including one high-severity issue, along with several medium- and low-severity findings. According to the report, the issues identified in the Aqua program involved logic inconsistencies, unit mismatches, execution edge cases, and tool-related problems. The disclosed vulnerabilities have already been fixed.