TrustedVolumes Hacker Returns $2M in ETH After Exploit Negotiation

On July 18, 2026, the hacker involved in the TrustedVolumes incident returned 1,122.12 ETH, valued at approximately $2 million, following negotiations. The initial attack on May 7, 2026, resulted in the theft of over $5.8 million in digital assets, including ETH, WBTC, and stablecoins. The hacker retained a similar amount as a 'bug bounty' under a negotiated agreement. The attack exploited an access-control vulnerability in the TrustedVolumes liquidity resolver, linked to 1inch Fusion. This incident highlights a growing trend in decentralized finance where organizations negotiate with attackers instead of pursuing legal action. The total loss from the exploit was estimated at around $6.7 million when accounting for related damages. Both parties confirmed the settlement on-chain, indicating a willingness for constructive communication in future incidents.

Key Points: • The TrustedVolumes hack resulted in a loss of over $5.8 million on May 7, 2026. • The hacker returned 1,122.12 ETH worth approximately $2 million after negotiations. • The attack exploited an access-control vulnerability in the liquidity resolver.