On June 12, 2025, a critical reentrancy vulnerability was identified by
@adrianromero @yAuditDAO @electisec in Cove’s liquidity mining program and promptly neutralized. No user funds were lost, and 652,565 non-transferable COVE tokens were secured as a precaution.
The vulnerability was introduced in
@1inch token-plugins@1.0.0, and was integrated by Cove. This variant was never deployed within
@1inch infrastructure.