1inch:
the category-defining aggregator, opening a new kind of review for this project.
We tore apart 1inch, the largest DEX aggregator by cumulative volume, across a scorecard adapted specifically for aggregators: it doesn't hold its own liquidity, so we score routing quality and chain coverage in place of a single DEX's TVL. From a genuinely distinctive Pathfinder algorithm scanning 200-400+ liquidity sources across 13+ chains, a Fusion protocol delivering real, structural MEV protection through intent-based Dutch auctions, and a zero-platform-fee model, to a real, confirmed March 2025 incident where roughly $5 million was exploited from resolver infrastructure via an outdated contract, and a genuinely important, category-defining risk worth explaining directly: an aggregator's security is necessarily compounded by every underlying DEX it might route through, a structurally different model than a single, self-contained exchange; and landed on a score the marketing page won't show you.
Our take, up front: 1inch is the first DEX aggregator we've reviewed in this series, a genuinely different kind of platform from everything we've covered so far: rather than holding its own liquidity, it's a routing and execution layer sitting on top of other DEXs, founded in 2019 by Sergej Kunz and Anton Bukov at an ETHGlobal hackathon, with mainnet launch in 2020. Real, genuinely massive, well-documented scale: the largest DEX aggregator by cumulative volume, processing over $300 billion cumulatively and $214 billion during 2025 alone, a 39% year-over-year increase. Real, genuinely distinctive Pathfinder routing algorithm scanning between 200 and 400+ liquidity sources across 13+ blockchains, splitting larger trades across multiple pools to regularly save 0.5-2% compared to routing through a single DEX directly. Real, genuinely distinctive Fusion protocol: an intent-based, Dutch-auction execution model where professional resolvers compete to fill orders, often covering gas costs entirely, with trades kept off the public mempool until resolver commitment, providing genuine, structural MEV protection rather than a bolt-on feature. Real, genuinely broad reach extended into Solana as of April 2025, bringing more than 1 million Solana tokens into reach via Trust Wallet and Phantom support. Real, disclosed audits from CertiK and OpenZeppelin, genuinely non-custodial architecture with atomic transactions, and a genuinely strong, well-corroborated 4.7/5 Trustpilot rating from verified users. Real, genuinely transparent, zero-platform-fee model: users pay only underlying DEX pool fees and gas, with Fusion mode able to eliminate gas costs entirely for eligible swaps. What we can't set aside: a real, confirmed incident. In March 2025, roughly $5 million was exploited from resolver infrastructure via an outdated Fusion v1 Parser contract; critically, this hit resolver-side operational funds rather than end-user swap funds directly, a genuinely important distinction worth being precise about. Real, genuinely important, category-defining risk worth explaining directly: as an aggregator, 1inch's own contract security is necessarily compounded by the security of every underlying DEX it might route a trade through, a structurally different risk model than a single, self-contained DEX, and aggregation, however good, cannot make a toxic or honeypot token safe. We weighted all of it below.
Real, disclosed audits from CertiK and OpenZeppelin. Real, genuinely important, confirmed incident: in March 2025, roughly $5 million was exploited from resolver infrastructure via an outdated Fusion v1 Parser contract (2.4M USDC plus 1,276 WETH); critically, this hit resolver-side operational funds, not end-user swap funds directly, a genuinely important distinction worth being precise about. Real, genuinely distinctive, category-specific risk: as an aggregator, 1inch's own contract security is necessarily compounded by the security of every underlying DEX it might route a trade through, a structurally different risk model than a single, self-contained DEX. Real, honest, direct caveat repeated across sources: aggregation can route well, but it cannot make a toxic, honeypot, or transfer-fee token safe. Real, at least one detailed source gives 1inch a specific 4.0/5 security rating, citing strong user protection tempered by the March 2025 resolver-infrastructure incident.
Pros
- Disclosed audits from CertiK and OpenZeppelin; genuinely non-custodial, atomic transactions
- 4.0/5 third-party security rating from a detailed, independent source
Cons
- Confirmed March 2025 resolver-infrastructure exploit (~$5M)
- Risk is structurally compounded by every underlying DEX the router might use
Real, genuinely large, well-documented scale: the largest DEX aggregator by cumulative volume, processing over $300 billion cumulatively and $214 billion during 2025 alone, a 39% year-over-year increase. Real, genuinely distinctive Pathfinder algorithm scanning between 200 and 400+ liquidity sources depending on the source cited, splitting large trades across multiple pools. Real, disclosed, meaningful savings: for larger swaps ($1,000+), split routing is reported to regularly save 0.5-2% compared to single-DEX execution.
Pros
- Largest DEX aggregator by cumulative volume ($300B+); $214B in 2025 alone
- Disclosed, real 0.5-2% savings on larger trades vs. single-DEX routing
Cons
- Source count varies (200 vs. 400+) depending on which source is cited
Real, genuinely non-custodial; atomic on-chain transactions mean tokens automatically return to a user's wallet if a swap fails. Real, disclosed, named founders (Sergej Kunz, Anton Bukov). Real, functioning 1INCH DAO governance and staking. Real, honest, unresolved discrepancy worth noting: at least one source's claim of "no major protocol-level breach since 2019" sits awkwardly next to the confirmed March 2025 resolver-infrastructure incident, a messaging inconsistency worth being aware of.
Pros
- Genuinely non-custodial; disclosed, named founders (Kunz, Bukov)
- Functioning 1INCH DAO governance and staking
Cons
- Unresolved messaging inconsistency around the March 2025 incident's severity
Real, genuinely broad reach across 13+ blockchains, spanning Ethereum, Arbitrum, Base, BNB Chain, Polygon, and more. Real, genuinely distinctive Solana integration added in April 2025, bringing over 1 million Solana tokens into reach via Trust Wallet and Phantom support, extending well beyond a purely EVM-centric design.
Pros
- 13+ blockchains, including a genuine, distinctive Solana integration (Apr 2025)
- 1M+ Solana tokens reachable via Trust Wallet and Phantom
Cons
- None significant found in our research
Real, genuinely strong, disclosed third-party sentiment: a 4.7/5 Trustpilot rating from verified users, described as one of the highest such scores among DeFi platforms. Real, genuinely distinctive gasless Fusion mode, where resolvers cover gas costs on a user's behalf. Real, honest, structural complexity: using an aggregator well still requires genuine comfort with gas, token approvals, and reading smart-contract prompts, per multiple sources.
Pros
- 4.7/5 Trustpilot rating from verified users, among the highest cited in DeFi
- Gasless Fusion mode genuinely reduces friction on eligible swaps
Cons
- Genuine baseline complexity: gas, approvals, and contract prompts remain real for newcomers
Real, genuinely transparent, zero-platform-fee model: users pay only underlying DEX pool fees (typically 0.05-0.30%) and gas, with Fusion mode able to eliminate gas costs entirely for eligible swaps.
Pros
- Zero platform fee; you pay only underlying pool fees and gas
- Fusion mode can eliminate gas costs entirely on eligible swaps
Cons
- Underlying pool fees still apply and vary by which DEX you're routed through
Real, genuinely distinctive Fusion intent-based Dutch-auction execution with built-in MEV protection. Real, limit order functionality. Real, an optional, separate 1inch Liquidity Protocol (formerly Mooniswap) designed specifically to reduce sandwich-attack profitability via virtual balance accounting.
Pros
- Fusion's intent-based Dutch auctions provide genuine, structural MEV protection
- Limit orders; an optional, purpose-built anti-sandwich AMM (1inch Liquidity Protocol)
Cons
- None significant found in our research
Access only through 1inch's official app, and revoke unused token approvals periodically.
Given that aggregator risk is compounded by whichever underlying DEX you're routed through, revoke old approvals regularly, use Fusion mode when available, and treat unusually cheap or obscure tokens with real caution regardless of how the route was priced.
The category's benchmark, and a genuinely good place to start reviewing aggregators.
1inch earns real credit for defining what a good DEX aggregator looks like: genuinely massive, well-documented scale, a thoughtfully engineered MEV-protection system in Fusion, and a fee model that's about as transparent as this category gets. We also think it's worth being direct about something that applies to every aggregator, not just this one: routing well doesn't mean routing risk-free. The March 2025 resolver incident is real, even if it didn't touch end-user swap funds directly, and the deeper truth is that an aggregator's security is only as strong as the weakest DEX it might send your trade through. That's not a knock on 1inch specifically; it's the honest, structural nature of the category it invented, and we think any aggregator we review going forward will carry some version of the same trade-off.
The scorecard above is deliberately general. Whether 1inch is right for you depends heavily on which of these you already are.
The trader making larger swaps who wants genuinely better pricing than a single DEX can offer directly
This is exactly where an aggregator's real, disclosed value (0.5-2% savings) shows up most clearly.
The trader who specifically wants real MEV protection via Fusion's intent-based, off-mempool execution
This is a genuinely distinctive, structural protection most single DEXs don't offer natively.
The user who revokes old token approvals regularly and treats unfamiliar tokens with real caution
Given the category's compounded risk model, this habit genuinely matters more here than on a single DEX.
Anyone who wants a single, self-contained security perimeter rather than one inherited from the underlying route
The structurally compounded risk model is real and worth understanding before relying on any aggregator heavily.
The scorecard covers the headline judgment calls. These four tables cover the specifics we didn't want to bury in prose; what makes an aggregator structurally different from a single DEX, the March 2025 incident explained precisely, Fusion mode broken down step by step, and 1inch by the numbers.
Aggregator vs. single DEX: a structurally different risk model
| A single DEX (e.g. Uniswap, Curve) | 1inch (an aggregator) | |
|---|---|---|
| What it is | One exchange with its own contracts and liquidity pools | A routing layer sitting on top of 200-400+ other DEXs |
| Security depends on | That one platform's own contracts and audits | 1inch's own contracts, plus every underlying DEX it might route through |
| Core value | Direct access to that platform's specific pools | Better pricing by comparing and splitting across many pools at once |
| What it can't fix | Its own pool's liquidity depth | A toxic, honeypot, or transfer-fee token on any route it might use |
This is a genuinely different category of platform from everything else we've reviewed in this project; we adapted our scorecard specifically to reflect it, and expect the same trade-off to show up in every aggregator we review going forward.
The March 2025 incident, precisely
| Detail | What happened |
|---|---|
| Root cause | An outdated Fusion v1 Parser smart contract vulnerability |
| Amount | ~$5 million (2.4M USDC + 1,276 WETH) |
| Who was affected | Resolver infrastructure specifically, not end-user swap funds directly |
| Independent security rating | 4.0/5 from one detailed source, citing this incident directly as the reason it isn't higher |
We're being precise about this distinction because it matters: a resolver-side infrastructure exploit is a real, disclosed security event, but it's a different kind of event than end users losing funds directly from a swap.
Fusion mode, step by step
| Step | What happens |
|---|---|
| 1. Intent signed | The user signs an intent to swap, rather than broadcasting a transaction directly |
| 2. Dutch auction | Professional resolvers compete to fill the order at the best available price |
| 3. Off-mempool execution | The trade isn't broadcast publicly until a resolver commits, removing the main MEV attack surface |
| 4. Gas covered | The winning resolver often covers gas costs on the user's behalf |
This intent-based design is a genuinely structural approach to MEV protection, not a simple slippage-tolerance setting; it changes when and how a trade becomes visible to the broader network.
1inch by the numbers
| Metric | Figure |
|---|---|
| Founded | 2019 (ETHGlobal hackathon); mainnet 2020 |
| Cumulative volume | $300B+ |
| 2025 volume | $214B (+39% YoY) |
| Liquidity sources scanned | 200-400+ depending on the source cited |
| Chains supported | 13+, including Solana since April 2025 |
| Trustpilot rating | 4.7/5 from verified users |
As the first aggregator in this project, we don't yet have another platform in this exact category to compare these figures against directly; that comparison will grow as we review more aggregators.
We don't just want to hand you our number; we want to show you how it sits next to what other review desks and comparison sites have published. We've excluded 1inch's own MEXC-hosted press-style content and treated only genuinely independent review sources below.
Our score lands close to the aggregated industry average, one of the smaller gaps we've found across this project; the genuinely strong scale, transparent fees, and thoughtful MEV protection we weighted heavily are the same qualities most independent sources single out favorably.
| Source | Score | Type |
|---|
Scores compiled by our editorial team from publicly available reviews as of August 2026. "Editorial estimate" means the outlet didn't publish a single numeric score, so we converted their published verdict and sentiment into a comparable 100-point figure. Verify current figures directly with each source before citing them elsewhere.
An aggregator. 1inch doesn't hold its own liquidity in the way a DEX like Uniswap or Curve does; it's a routing layer that scans hundreds of other DEXs and splits your trade across whichever pools offer the best combined price.
In March 2025, roughly $5 million was exploited from resolver infrastructure via an outdated Fusion v1 Parser contract. This affected resolver-side operational funds specifically, not end-user swap funds directly.
1inch itself charges zero platform fees. You pay only the underlying DEX pool fees (typically 0.05-0.30%) embedded in the swap rate, plus gas, unless you use Fusion mode, where a resolver often covers gas for you.
An intent-based execution mode where you sign an intent to swap rather than broadcasting a transaction directly. Professional resolvers compete in a Dutch auction to fill your order, often covering gas, and your trade stays off the public mempool until a resolver commits, providing genuine, structural MEV protection.
It depends what you mean by safer. You often get better pricing and real MEV protection via Fusion, but your security is compounded by every underlying DEX 1inch might route your specific trade through, rather than resting on a single platform's own contracts alone.
13+ blockchains, including Ethereum, Arbitrum, Base, BNB Chain, and Polygon, plus Solana as of April 2025, with more than 1 million Solana tokens reachable via Trust Wallet and Phantom.
Sergej Kunz and Anton Bukov, who built the first version at an ETHGlobal hackathon in New York in 2019, with mainnet launch in 2020.
Not fully. Aggregation finds the best price across legitimate liquidity sources, but multiple independent sources are direct that it cannot make a toxic, honeypot, or transfer-fee token safe. That diligence remains on you.
More Reviews
Jupiter – DEX Aggregator Review
Score: 78/100. Highest score in this whole project: ~95% Solana share, with the one 2024 phishing incident purely user-side.
Read More
Rubic – DEX Aggregator Review
Score: 51/100. Lowest in this sub-series: two 2022 hacks and unresolved, wide gaps in its own claimed audit scope.
Read More
KyberSwap – DEX Aggregator Review
Score: 63.5/100. Dual aggregator+AMM; the Nov 2023 Elastic exploit left the aggregator itself confirmed unaffected.
Read More
Rango Exchange – DEX Aggregator Review
Score: 69/100. Cleanest incident record we found in this whole series, undercut only by just two disclosed audits.
Read More