Security firm OpenZeppelin audited 1inch's SwapVM execution engine, the Aqua router, and the live pegged-swap and concentrated-liquidity instructions. In the audited flow, Aqua prices a fill onchain, the provider signs the instructions, and SwapVM runs them at execution.
- The report is public and counts as one of eight independent Aqua and SwapVM audits
- 1inch noted "an audit is not a guarantee" alongside the disclosure
- Follows similar public disclosures from Hexens (SwapVM production paths) and Nethermind (Aqua accounting), as 1inch continues publishing its audit work across the swap stack