Access restrictions across three products

1inch said on October 30 that it blocked Binance exploit-linked addresses from its dApp, Wallet and API within the first hour. Its 04:25 UTC statement named ZeroShadow, SEAL 911 and TRM Labs among the partners supporting its risk team.

The team said it was adding newly identified addresses and sharing the list with resolvers and integrators. It also offered Binance assistance and pledged cooperation with law enforcement on tracing and recovery.

1inch acknowledged that some 1INCH tokens were stolen, but said the token lacks freeze or blocklist functionality. It did not announce a recovered amount.

Screening access is not freezing a token

The distinction is between controlling access to a service and changing what an asset's contract permits. An address restriction can prevent use of the covered product without itself removing the wallet holder's ability to transfer a token elsewhere.

1inch's existing address-screening guide explains that it uses TRM Labs data to identify risks and blocks addresses from its interface when flagged. The guide also describes a review route for users who believe a restriction was mistaken. This is background on its screening framework, not proof of how every individual incident-linked address was classified.

The ERC-20 standard defines functions such as transfers, balances and spending allowances. It does not require an administrative freeze function. However, ERC-20 compatibility does not mean a token cannot include additional controls: OpenZeppelin documents a freezing extension that can restrict transfers of designated balances.

Accordingly, the reported limitation is specific to 1INCH's design, not a universal property of every ERC-20 asset. Sharing an address list also does not establish that every third-party integration has implemented identical restrictions.

What the response establishes

For broader developments, see our Binance incident report. Our custody guide explains the difference between controlling an account interface and controlling assets.

Primary statement verified October 30, 2026, 05:49 UTC. Screening claims are attributed to 1inch.