1inch and HackenProof published a vulnerability bounty report covering January through June 2026. Across six core 1inch vulnerability bounty programs on HackenProof, security researchers submitted 1,055 reports, of which 32 received rewards. The Aqua shared liquidity layer attracted the most reports, with 472 submissions and nine rewarded findings. The breakdown included 267 reports for 1inch smart contracts, with three rewarded; 85 for the wallet, with six rewarded; 68 for the web platform, with one rewarded; 111 for the Business program, with nine rewarded; and 52 for infrastructure, with four rewarded. The Aqua program received reports from 217 researchers. The findings included one high-severity vulnerability and several medium- and low-severity issues involving logical inconsistencies, unit mismatches, execution edge cases and tool-related problems. All reported issues have been fixed.