Treasury Funding for 2025 Security Audits of New & Upgraded Protocols

1.0 General
1

Treasury Funding for 2025 Security Audits of New & Upgraded Protocols

Simple Summary

  • Allocate 1,359,000 USD from the 1inch DAO treasury to 1inch Limited.
  • Purpose: conduct independent smart-contract security audits for every new protocol launch and for all major upgrades scheduled in 2025.

Abstract

This proposal allocates 1,359,000 USD from the DAO treasury for 1inch Limited to perform rigorous, publication-grade security audits on upcoming 1inch smart contracts and on upgrades to existing contracts throughout 2025. Audit results (findings, remediation steps, and re-audit confirmations) will be published to the community before deployment, reducing exploit risk and strengthening user trust.

Motivation

Evolving threat landscape: DeFi exploits cost > $2 B in 2024 alone; proactive audits are cheaper than post-incident recovery.

Expansion roadmap: 1inch plans multiple new components in 2025 (e.g., Fusion+ extensions, cross-chain, etc.). Each adds an attack surface.

Community assurance: Formal audits protect user funds, improve brand reputation, and can be cited in partnership and exchange listings.

Operational efficiency: Centralising audit funding lets product teams schedule audits earlier, shortening launch cycles.

Specification

Item Detail
Recipient 1inch Limited Wallet 0x8142d900AaB5B5363a6D60E0Cfa54110cde8FdD5
Total amount 1,359,000 USD (disbursed in USDC from treasury multisig)
Release schedule 100 % upfront
Process For each protocol release contract at least 4-6 external auditors
KPIs 100 % audit completion on pre-release stage; median severity ≤ “Medium”; all “High/Critical” issues resolved or formally accepted.

Rationale

  • Why 1inch Limited?

  • Deep domain expertise in 1inch architecture; avoids onboarding lag.

  • Proven track record: audited Fusion Router, Intent Resolver, Spot Price Aggregator (zero post-deploy criticals).

Considerations

Security Implications

  • Threat mitigation: audits aim to uncover logic-flaws, re-entrancy vectors, gas griefing, DoS-via-price-oracle, and permission mis-configurations before mainnet deployment.

  • Transparency: all final reports, diff-reviews will be open-sourced under MIT license.

Governance & Treasury Implications

  • Cost: 1,359,000 USD

  • No tokenomics change: spend is a one-time budget for 2025; does not alter staking rewards or fee distribution.

Team Qualifications (1inch Limited)
  • Completed 35+ audits since 2021 with publicly posted reports (Fusion Protocol, Limit Order Protocol, Aggregation Router, Merkle Distribution v2, Cross-chain Protocol, etc).
    https://github.com/1inch/1inch-audits
2 Likes
2

Security is an aspect that we do not wish to skimp on. However, we currently find the existing proposal to be insufficient. There need to be more details presented to the DAO before delegates can conceivably make a more informed decision. We therefore request a more comprehensive budget breakdown, an understanding of who will conduct the audits, and most importantly, what aspects of the 1inch product suite will be audited. At the current moment, this proposal just contains generalities.