Every liquidity model carries risk. What changes between models is where each risk sits, who carries it and what you can do about it. Aqua removes some classes of risk by design, keeps the market risks every LP faces and adds a few of its own that you should understand before you ship a position.
The numbers behind the risk
Where your tokens sit
Custody is the first question to ask any liquidity venue: who holds the tokens while they quote, and what has to be trusted for them to come back. In a pooled AMM your deposit becomes part of one shared contract balance. In an RFQ system the inventory usually sits with the quoting firm that prices it. On Aqua nothing is deposited: tokens stay in your wallet and a swap can move them only when it fills.
The risk matrix
Here's how Aqua compares to traditional liquidity provision models. A red dot means the risk is structural to the model. Orange means it is real but bounded or manageable. Green means it is small or absent by design. Use the detail to make your decision as well as the dot.
| Classic AMM pool | Concentrated AMM | RFQ system | Aqua | |
|---|---|---|---|---|
| Who holds your tokens | The pool contract holds your deposit | The pool holds your deposit, behind a position manager | The quoting firm holds the inventory | They stay in your wallet, behind a revocable allowance |
| Smart-contract exposure | One shared contract every attacker studies | Pool, position manager and hooks widen the surface | A small fill contract | One audited engine, immutable positions, still new code |
| Impermanent loss | Structural for volatile pairs | Grows faster inside narrow ranges | Carried by the firm, not you | Applies per position. Your range sets the trade-off |
| Stale-price pickoff | Arbitrage flow is a steady cost | Concentration raises the cost | Priced into every quote | Depends on the pricing logic you pick |
| Counterparty | Anonymous flow, no counterparty to vet | Anonymous flow, JIT bots included | One named firm you rely on | Verified counterparties, optional Conditional Access |
| Getting out | Withdraw any time, unless the pool is paused | Withdraw any time. Out-of-range positions sit one-sided | On the firm's terms | Close in one transaction. Nothing was deposited |
| Approvals and upkeep | One approval per pool | Approvals plus constant range upkeep | Bespoke setup per firm | One revocable allowance per token and chain |
Custody risk
A pooled deposit is only as safe as the contract that holds it, and pooled contracts are the honeypots attackers study hardest: one bug can drain every depositor. Handing inventory to a quoting firm swaps that for the firm's operational and solvency risk. On Aqua the only permission you grant is a revocable ERC-20 allowance: it caps what a fill can move, your real wallet balance is the binding limit and revoking stops new fills instantly. How custody and the allowance work, step by step.
Smart-contract risk
Any on-chain system can fail, audits included: pool code, position managers, compilers and math libraries have all been exploited in production across DeFi. Aqua reduces vulnerabilities, but no product can remove them completely. There is no pooled balance to drain. Positions are immutable once shipped, and the engine is audited by eight independent firms. It is also new code, so treat it like any young protocol and size what you commit accordingly.
Blockchain risk
Transactions can fail, arrive late or land in a different order. Networks congest, fork and halt. On-chain actions are irreversible: a wrong address or a misconfigured position usually cannot be undone.
Impermanent loss
Impermanent loss is the gap between holding your tokens and providing them. As price moves, a position rebalances toward the weaker asset, so its value grows more slowly than a plain balance would. The loss becomes real when you close. Impermanent loss applies to AMM pools and Aqua positions alike, and it grows faster inside narrow ranges. For pegged pairs it appears as a de-peg that fills your position with the weaker asset. Swap fees exist to compensate for it, but they do not always manage to.
On Aqua the range and width are per position, so the trade-off is yours: wider ranges soften impermanent loss but collect fewer fees, tighter ranges do the reverse. How ranges shape the trade-off.
Stale prices and better-informed flow
A resting quote can go stale, and the fastest flow that hits a stale quote is the best informed: research measures this arbitrage pickoff as a steady cost on passive AMM positions. Pooled AMMs add a second cost on top, JIT bots inserting liquidity around large swaps to dilute the fee moment. Aqua closes the JIT channel by design, one position, one owner, and leaves pricing with you: the tighter and more static your quotes, the more informed flow can take. Why JIT sniping cannot happen to an Aqua position.
Counterparty risk
A pool fills anyone, anonymously. You never know whose flow you took. An RFQ system is the opposite: one named firm whose performance and solvency you rely on. Aqua sits between the two. Swaps that fill positions across the 1inch Network are routed by Resolvers, counterparties that complete the 1inch verification process. A position can additionally restrict who fills it with an on-chain Conditional Access check.
Whether swaps fill depends on your parameters, market conditions and swap demand. A position may fill rarely, or never. Past activity of a pair says nothing about its future. The set of supported flows and counterparties can change, and no level of demand is promised.
Exit and underfunded positions
Pooled models hand tokens back on withdrawal, unless the contract is paused or drained first. RFQ arrangements unwind on the firm's terms. On Aqua there is nothing to withdraw because nothing was deposited: closing is one transaction that moves no tokens, and revoking the allowance stops new fills instantly. The Aqua-specific caution points the other way: if your wallet balance drops below what your positions quote, they stop filling until you top the balance up. Nothing is liquidated. How closing, revoking and top-ups work.
Approvals, keys and upkeep
Many liquidity losses in practice are operational rather than protocol-level: an approval left open to a buggy contract, a compromised signer, a malicious front end, a position nobody watched. These risks follow you to every venue, Aqua included. The habits that keep them small:
- Grant the allowance on the official app only, and review or revoke it per token and per chain whenever you stop providing.
- Treat wallet security as position security: on Aqua your keys are the custody layer.
- Verify what you sign. Every position is an immutable, hash-addressed config you can inspect before signing.
- Check coverage after large price moves: an underfunded position stops earning until you top it up.
- Treat prices, charts and app data as information from third-party sources: they can lag or drop out, and they are not something to act on unverified.
Your parameters
Every parameter is yours: range, opening price, fee, amounts. The defaults and presets in the builder are starting points for convenience. They are not tuned to you, and they are not a recommendation.
Beyond swap liquidity
Lending markets, vaults, staking and bridges are different products with different risk stacks, so the matrix above does not score them. The same three questions still apply: who holds the tokens, what code can move them and how you get out.For the lending case in detail, see how Aave collateral combines with Aqua, including a real liquidation replayed step by step.
- Lending pools add borrower and oracle risk: withdrawals can pause at full utilization and bad debt is shared by the pool.
- Vaults add a delegation layer: you inherit every protocol the strategy touches, plus the operator's judgment.
- Staking adds slashing and exit queues, and liquid-staking tokens can drift from their peg under stress.
- Bridges concentrate some of the largest honeypots in DeFi history, and a bridged token is only as good as the bridge backing it.
Aqua is evolving
Features can change, pause or disappear. That Aqua is available to you does not mean it is suitable, or lawful, for you to use where you are.
The rules around digital assets and liquidity provision are unsettled and differ by jurisdiction. Whether your use of Aqua is lawful, and what tax follows from it, is on you.
The protocol fee
The protocol fee share sent to the 1inch DAO is set by DAO governance and can change at any time.
This page is educational, not exhaustive and not advice. Risks combine in ways not described here, and new ones emerge. It does not replace or modify the 1inch Terms of Use, which govern your use of Aqua. If anything here differs from the Terms of Use, the Terms of Use prevail. Nothing on this site is investment, legal or tax advice or a recommendation.
Common questions
Providing liquidity takes knowledge and experience. Swap fees are not guaranteed, prices can move against your position (impermanent loss), and you bear market risk and smart-contract risk. You can lose tokens you commit. As prices move, your tokens can also end up entirely in one asset of the pair. You stay in self-custody and can cancel a position or revoke the token allowance at any time. See the full risk overview: Risks, compared.
Your maximum risk is not the approval you grant, it is the most a swap can pull from your wallet. In the 1inch dApp the token approval defaults to an unlimited amount (type(uint256).max), but that is only a cap. Aqua never holds your tokens, and a swap can move only what is in your wallet when it fills. Your real exposure is the Pullable amount in the app: for each token, the smaller of what your positions can use and what you actually hold. You can revoke the allowance at any time, per token and per chain.
Yes. 1inch Aqua and the SwapVM engine have been audited by eight firms: OpenZeppelin, Bailsec, Hexens, Nethermind, Theori, Decurity, Hashlock and MixBytes. Audits reduce risk but do not guarantee the code is free of vulnerabilities. Aqua is audited, but new.
