On March 5, 2025, 1inch disclosed a $5M exploit in Fusion v1 resolver contracts when a buffer overflow in _settleOrder() allowed an attacker to trigger integer underflow and hijack control flow to impersonate resolvers and execute unauthorized swaps. Most funds were recovered after negotiation.