As per 1inch's findings, the private keys linked to vanity addresses could be calculated with brute force attacks.