DEX Aggregators

Matcha is the trading front-end for the 0x Protocol, a foundational aggregation layer live since 2020. It aggregates AMM liquidity plus RFQ quotes from professional market makers; MEV protection is opt-in, by turning on Matcha Auto or selecting RFQ as the liquidity source. Non-custodial and extensively audited; settlement runs through immutable 0x Settler contracts, and AllowanceHolder, the only contract holding user approvals, is formally verified. Neither has lost user funds to a remote exploit: in January 2026, 18 Matcha Meta users who had granted infinite approval directly to third-party SwapNet contracts lost $13.43M when those contracts were exploited, and DefiLlama lists that incident under Matcha. Built by 0x Labs: new Settler deployments are gated by a multisig, and the ZRX governance Snapshot space has had no proposal since May 2024.

Best for: Foundational 0x infrastructure, extensively audited

1inch launched in 2019 as one of the earliest DEX aggregators: its Pathfinder engine splits a swap across many DEXs for the best price, executed through a non-custodial Aggregation Router that is non-upgradeable (each version ships as a fresh immutable deployment). 1inch Fusion, the default in simple mode, offers MEV-protected intent swaps filled by a whitelisted set of up to 10 resolvers, who bundle transactions before sending them to the mempool. Extensively audited (~9 firms on Fusion alone); the router has never lost user funds. The 2025 exploit was a bug in 1inch's own deprecated Fusion v1 settlement contract that took about $5M from resolver contracts (the attacker kept about $450k), with no end-user funds affected; separately, DefiLlama records an October 2024 front-end supply-chain attack ($723k), after which 1inch said its protocols, wallet and API were not affected.

Best for: Immutable, extensively-audited router

CoW Swap (CoW Protocol) is a batch-auction aggregator: you sign a gasless off-chain intent, orders are batched into auctions cleared at a uniform price, and bonded solvers, allowlisted after KYC, compete to find best execution (including peer-to-peer Coincidence-of-Wants). Trade ordering within a batch is irrelevant, so sandwiching/front-running is structurally removed. The protocol's own off-chain services are open-source, but each solver team builds its own solver engine and third-party aggregator algorithms are proprietary; immutable settlement contract, DAO-governed (COW). No user funds have been lost through the contracts — the Feb-2023 incident drained the settlement contract's fee buffer via a misconfigured solver, users were unaffected and it was fully reimbursed. In April 2026, however, attackers controlled the cow.fi domain for about 4.5 hours through a registrar attack, and the core team estimates that approximately 1.2M USDC worth of user funds were taken; CoW Swap's contracts were not hacked.

Best for: MEV protection by design (batch auctions)

UniswapX is Uniswap's intent-based routing protocol: you sign an order, quoters vetted by Uniswap Labs compete via RFQ for an exclusive fill under a Uniswap Labs cosigner, and permissionless fillers can fill it (including across AMMs) after exclusivity ends or by overriding it, giving MEV protection and gas-free failed swaps. Live since 2023 and now on 8 chains, fully open-source with an immutable core; audited across versions by ABDK, OpenZeppelin, Spearbit and Cantina, though the deployed V2 reactor (Ethereum) was reviewed only by Spearbit and the V3 reactor (7 chains) only by Cantina. Self-custodial; governed by UNI. No exploit has drained user funds.

Best for: MEV-protected intent swaps