According to Foresight News, Decurity's report on the 1inch security incident reveals that after negotiations with the hacker, most of the $5 million stolen has been returned. The hacker retained a portion as a bug bounty.

The attack originated from a vulnerability in the Fusion v1 smart contract disclosed by 1inch on March 5. The issue primarily affected outdated versions of the parser, leaving regular users' funds unaffected. The total loss was approximately $5 million.