1inch Co-Founder Fired — Or Was It? The Second Tier Split and the Security Gap No One Is Pricing

Late last month, Anton Bukov — the co-founder who helped architect 1inch's protocol layer — dropped a message on DeFi Twitter that read like a bad audit report. He's out. Not retired. Not transitioned. Fired, he says, by the company he helped build. The effective date: late November. The reason: still murky. The response from 1inch: a flat denial wrapped in a lawyer's welcome mat. Bukov, the company insists, 'was never an employee who could be fired.' I pulled the on-chain numbers this morning. 1INCH is holding. No volume spike. No panic. The market, so far, has shrugged. But I've been in this game long enough to know the chart isn't the whole story. I was in Mumbai during the 2017 ICO sprint, living on Telegram, decoding whitepapers before the rest of the world woke up. I rode DeFi Summer from inside Compound's earliest community calls, breaking down Uniswap LP mechanics for retail investors before the crowd arrived. And I spent 2022 writing post-mortems while the bodies of LUNA and FTX were still warm. Here's what I know: most founder exits are noise. This one is different. Not because of the drama — but because of what the drama leaves behind. Because while everyone was arguing about whether Bukov was fired, he casually dropped a second bomb. He's founding a new infrastructure startup. The name: Second Tier. No whitepaper. No code. No roadmap. Just a name, a founder, and a void where a security architect used to sit. So let's actually slow down and think. This is the kind of moment where velocity matters, but accuracy matters more. What do we really know? We know 1inch is one of the most critical routing layers in decentralized finance. It's a DEX aggregator: the algorithm that hunts across Uniswap, Curve, Balancer, and dozens of other liquidity venues to find the cheapest execution path. When you swap tokens in a major wallet, there's a strong chance 1inch's routing engine is the invisible hand working your order. At its peak, the protocol has commanded billions in total value locked and moved billions more in volume. It doesn't custody your funds — it navigates. And that makes it the kind of infrastructure that DeFi quietly depends on. We know Bukov's role was not decorative. By his own account, he owned protocol architecture and security. In DeFi, that job means smart-contract design, system-level risk assessment, and the internal review processes that separate a working protocol from a headline exploit. It is, quite literally, the last line of defense between users and a drained wallet. And it is notoriously hard to replace. DeFi security architects aren't produced by bootcamps; they're forged in bear markets and post-mortems. We know the public record is now three facts with two conflicting narratives. One: Bukov says 1inch fired him in late November. Two: Bukov says he's building Second Tier — and that's every technical detail we've got. Three: 1inch denies the firing, adding that Bukov had been part of team work and 'was never an employee who could be fired.' That's it. The entire record. Everything else is spin, inference, and speculation. And that's exactly where I want to dig in. The Technical Read: There Is No Technical Read Let me be brutally honest from a data perspective. There is nothing to analyze about Second Tier yet. No code. No testnet. No architecture diagrams. No audit trail. No token economics. The entire technical evaluation condenses to one word — 'infrastructure' — and that word tells you almost everything and almost nothing simultaneously. Everything, because it reveals direction. A man who spent years building and securing a DEX aggregator doesn't pivot to cats or social tokens. The natural next move is up the stack: safer settlement layers, cross-chain messaging infrastructure, new aggregation primitives, or DeFi security tooling. Based on my audit experience, infrastructure startups born from protocol architects usually attack one of three pain points: the fragility of cross-chain bridges, the ruthlessness of MEV and sandwich attacks, or the opacity of routing and settlement finality. Nothing, because without a whitepaper, any specific claim is astrology. I don't trade on tea leaves. Show me the code, not the press release. But the name still tells a story. 'Second Tier.' In computing, a second-tier layer sits above the base layer — it's the stack built on top of the foundation. That's either humble positioning ('we build on the old rails') or a quiet declaration ('1inch is now the first tier, the legacy layer, and the interesting work happens above it'). When a founder names a company days after an ugly exit, that name is a thesis. I read it as: the value in DeFi is moving up the stack, and Bukov intends to be there first. The Security Vacuum Nobody Wants to Price Now the part that keeps me up at night: the handoff problem. When a protocol architect leaves a mature project, the risk isn't instant — it's a slow bleed. Institutional knowledge does not transfer through code comments. The reasons behind design decisions, the fragile code paths, the attack surfaces that need extra scrutiny — they live in a person's head. When the head walks out the door, the history leaves with it. 1inch has a history that makes this relevant. The protocol has survived front-end attacks. It has disclosed contract vulnerabilities through its bug bounty process — disclosures that prove the review system works, but also prove nobody is immune. Mature protocols can survive the departure of one architect. What they can't survive is a vacuum: no named successor, no public transition plan, no re-audit cadence. So I'll give you a framework I actually use internally — call it the 90-day security clock. If 1inch names a new security lead or publishes a strengthened audit roadmap within 90 days, this episode is a blip, a footnote in a governance newsletter. If the silence stretches past a quarter, the risk profile upgrades. DeFi audits catch bugs; they don't catch absent leadership. And in a bear market, where survival matters more than yield, leadership gaps get priced in slowly — but they get priced in. 'Never an Employee Who Could Be Fired': A Legal Tell, Not a Quip Stop and re-read that phrase. 'Never an employee who could be fired.' That is not a defensive tweet. That is a legal position, drafted with intention. In most jurisdictions, a co-founder is not an at-will employee. He's a shareholder. A director. A contractor. Some hybrid of all three. By framing Bukov that way, 1inch is doing two things. First: laying groundwork. If the dispute escalates into litigation over equity, intellectual property, or non-compete obligations, this statement becomes the foundation of 1inch's argument that no wrongful termination ever occurred. Second: acknowledging, maybe unintentionally, how messy the human layer under 'decentralized' finance really is. DeFi wasn't built for corporate HR. It was built for code, incentives, and open markets. But underneath the smart contracts live founders, egos, informal vesting arrangements, and governance tokens that rarely vote on anything substantive. The industry sold a story of code-is-law; the reality is Lord-of-the-Flies-with-cap-tables. When those power structures crack, the rails don't stop moving — but nobody is quite sure who holds the maintenance contract. That ambiguity isn't just a 1inch problem. It's a DeFi-wide structural fragility. Market Impact: The Chart Says 'Meh' Now the question I'm actually paid to answer: what does this mean for 1INCH? Short answer: probably very little, right now. I've watched this movie before. In 2017, EOS and Tron founder drama dominated timelines while the tokens mostly followed the broader market. In 2022, founder collapse at LUNA and FTX didn't just dent tokens — it annihilated ecosystems. The difference: those founders were the protocol. 1inch has a live product, a routed network effect, and a governance layer that doesn't vanish when one person walks. My estimate, based on the way DeFi markets have historically priced leadership exits: a low single-digit impact — call it less than five percent — mostly emotional, mostly temporary. If I see 1INCH's 24-hour volume suddenly double on this news, I'll revise that view fast. Volume spikes on founder drama are the market's way of saying a second shoe is expected. What I'm watching instead is the competitive window. When an incumbent wobbles, rivals smell blood. CowSwap, ParaSwap, and the long tail of aggregators all want the routing flows 1inch owns. If 1inch stumbles on security communication — or worse, loses more core engineers in the coming months — the market-share question becomes real. Founder exits don't kill protocols. Protracted talent bleed does. I've seen it happen in every cycle, from the post-ICO graveyard to the DeFi summer also-rans. There's also the question of what Bukov takes with him. Founders rarely leave alone. In my experience, technical teams are tribal — a trusted architect can pull two or three senior engineers into a new venture before the coffee machine at the old office goes cold. The source documents don't mention a talent exodus. But the absence of evidence is not evidence of absence. I'll be watching LinkedIn and GitHub activity far more closely than 1INCH's daily candle. Governance Fragility: The Story Beneath the Story Here's the deeper point, and the reason I'm writing more than a news blurb. The 1inch split isn't an isolated event. It's a symptom of a structural weakness across DeFi: key-man concentration. We tout permissionless systems, but the teams behind them have single points of failure in code access, security judgment, and narrative control. During DeFi Summer in 2020, I was translating APY mechanics and liquidity-pool mathematics into plain English while the hype machine ran at full volume. The energy was electric. But even then, I remember thinking: this entire ecosystem rests on the shoulders of a few hundred technical people. If they burn out, or split up, or get poached mid-cycle, the 'decentralized' protocols suddenly look very centralized indeed. Bukov's exit is that structural risk becoming visible in real time. The market will shrug because the product still works. But the people who matter — the capital allocators, the developers choosing where to build, the institutions deciding which rails to trust — just received a reminder that DeFi architecture is only as stable as the humans who maintain it. That reminder compounds. It doesn't show up on the price chart today. It shows up in insurance premiums, audit costs, and the quiet conversations where smart money decides which networks to treat as infrastructure and which to treat as experiments. The Contrarian Angle Nobody's Talking About Here's the read the echo chamber will miss. Everyone is treating this as a loss for someone. Bears say it's a loss for 1inch. Fans say it's a win for Bukov's new project. I think both are reading the wrong chart. The real story is that founder churn is net positive for the ecosystem. Talent mobility is how infrastructure improves. When a top architect leaves an incumbent and starts fresh, you get exactly what DeFi needs in a bear market: a second team attacking the same problems, carrying the scars of the previous era and the freedom of a blank page. The worst possible outcome for this industry isn't Bukov's departure. It's a frozen oligopoly where the same five teams hoard talent and nobody challenges the status quo. Competition is a feature, not a bug. And then there's the 'Second Tier' thesis again. If I'm right that the name is a positioning statement, then Bukov isn't just leaving a company — he's declaring where he believes the market's center of gravity is heading. Away from the base layer. Upward into aggregation, security services, and the connective tissue of a multi-chain world. That thesis, if correct, is good news for the broader ecosystem. It means the next wave of value creation isn't dependent on any single protocol — including the ones that look untouchable today. And if it's wrong, well, the market will tell us soon enough. It always does. What I'm Watching Next So what do you actually do with this information? You stop refreshing the argument threads and start tracking the signals that matter. The 90-day security clock. Does 1inch name a new security lead? Does it publish an audit roadmap with named firms and dates? Quick action downgrades the story. Silence upgrades the risk. Legal filings. Founder disputes this public don't stay on Twitter. If either side files a lawsuit — over equity, IP, non-competes — this becomes a persistent overhang. I'll be checking court records, not just crypto media. Second Tier's seed round. Top DeFi architects raise fast. A clean seed announcement within three to six months tells you the market believes in the new thesis. Silence tells you the opposite, and tells you the bear market is biting. The talent trail. Are more 1inch engineers updating their LinkedIn headers? Is anyone with a security-heavy GitHub profile suddenly coding in private repos? These are the signals that precede market-share shifts. And finally, 1INCH volume. A sudden doubling of 24-hour volume remains the cleanest tell that the market cares. The chart doesn't care about feelings. But it does care about who's left holding the keys. When the architect walks out of the building, smart money doesn't argue about who fired whom. It asks a simpler question: who's drawing the blueprints now — and are they any good? DeFi wasn't built for this. It has to survive it anyway.