The famous DEX aggregator 1inch was hacked on March 5, and lost more than $5 million due to contract vulnerabilities.
The hacker took advantage of the vulnerability of the old version of Fusion v1 smart contract to steal funds and left a message asking how much bounty to be given after return.
1inch After negotiating with the hacker, most of the stolen funds have been returned, and the hacker retained a part of them as a vulnerability bounty. The number of bonuses has not been announced, usually around 10%-15%.