{"investigation":{"slug":"locus-finance","entity_name":"Locus Finance","trust_score":22,"severity_base":null,"score_modifier":0,"confidence":0.74,"status":"published","content_type":"investigation","summary":"Locus Finance is a DeFi yield-vault protocol launched in July 2023 by Iakov Levin, the founder of the defunct custodial crypto platform Midas Investments, which collapsed in December 2022 with a reported $63.3 million deficit. On December 30, 2023, Locus suffered a $320,964 exploit due to a developer private key leak during a CTO transition. The LOCUS token has declined over 99% from its all-time high, the protocol's TVL is near zero, and Levin is subject to regulatory enforcement actions in California and Wisconsin related to his prior venture.","sections":[{"content":"Locus Finance is a decentralized asset management protocol built primarily on Ethereum and Arbitrum. The platform offers automated, tokenized yield-bearing vaults that bundle multiple DeFi strategies — including DEX liquidity provision, liquid staking, and stablecoin farming — under a single user-facing interface. The protocol launched on July 26, 2023, and reportedly attracted $1 million in total deposits within the first 24 hours of operation. Its native utility token, LOCUS, has a total supply of 15,000,000 tokens vested over ten years, with the token launch conducted via a Liquidity Bootstrapping Pool (LBP) from November 27 to November 30, 2023, starting at $4.50 per token. The protocol's staked variant, stLocus, entitles holders to 50% of protocol revenue and governance rights. As of mid-2026, the protocol's TVL stands at approximately $48,000, split between Arbitrum ($43,000) and Ethereum ($4,700), representing a near-total collapse from earlier levels.","heading":"Overview and Background","sources":[{"url":"https://medium.com/@locus.finance/introducing-locus-finance-a-new-era-in-defi-b9ae9048f2d2","name":"medium.com","type":"other","credibility":3},{"url":"https://iq.wiki/wiki/locus-finance","name":"iq.wiki","type":"other","credibility":3},{"url":"https://defillama.com/protocol/locus-finance?denomination=USD","name":"defillama.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Locus Finance was founded by Iakov Levin, also known publicly as 'Trevor Levin,' who previously operated Midas Investments, a Dubai-headquartered custodial crypto yield platform. Midas Investments attracted over $250 million in assets under management at its peak in 2021 before collapsing in late 2022. On December 27, 2022, Midas Investments announced it was shutting down operations, citing a $63.3 million deficit in its DeFi portfolio stemming from exposure to Terra/Luna, Celsius, and FTX contagion. Investors reported that the platform had converted approximately 55% of user funds into Midas's own MIDAS token prior to closure, which subsequently became effectively worthless. In July 2023 — approximately seven months after Midas's shutdown — Levin launched Locus Finance, positioning it as a transparent, decentralized successor to Midas with a commitment to return 50% of protocol revenues to former Midas investors. The Block reported on the new venture, noting its direct lineage to the collapsed platform. Levin conducted a public AMA session titled 'Why Should You Trust Locus After Midas?' in an effort to address community skepticism.","heading":"Founder History: Midas Investments Collapse","sources":[{"url":"https://www.theblock.co/post/240980/founder-of-defunct-midas-foundation-launches-new-defi-investment-platform-locus-finance","name":"theblock.co","type":"other","credibility":3},{"url":"https://medium.com/@coinness.gl/midas-investments-founder-launches-locus-finance-f6fda3ba2530","name":"medium.com","type":"other","credibility":3},{"url":"https://medium.com/@locus.finance/ama-session-why-should-you-trust-locus-after-midas-9a87c06ea805","name":"medium.com","type":"other","credibility":3},{"url":"https://bitkan.com/learn/what-happened-to-midas-crypto-is-midas-coin-a-good-investment-18592","name":"bitkan.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Iakov Levin and Midas Investments are subject to multiple state-level regulatory enforcement actions in the United States. The California Department of Financial Protection and Innovation (DFPI) issued a Desist and Refrain Order on April 6, 2023 against Midas Investments and Iakov Levin (also known as Trevor Levin), ordering them to cease the offer and sale of unqualified securities in California, including crypto asset interest-bearing investment contracts, pursuant to Corporations Code section 25532. The DFPI found that Levin, as CEO, directly controlled and induced Midas to violate Corporations Code section 25110. Separately, the Wisconsin Department of Financial Institutions also issued an administrative enforcement order against Midas Alpha and Iakov Levin, dated May 28, 2024. No enforcement actions specific to Locus Finance as a distinct entity have been publicly identified as of the investigation date, though the same individual who is subject to these orders is the founder of Locus Finance.","heading":"Regulatory Enforcement Actions","sources":[{"url":"https://dfpi.ca.gov/enforcement_action/midas-investments/","name":"dfpi.ca.gov","type":"other","credibility":3},{"url":"https://dfpi.ca.gov/wp-content/uploads/sites/337/2023/04/D-R-Midas-Investments.pdf","name":"dfpi.ca.gov","type":"other","credibility":3},{"url":"https://dfi.wi.gov/Documents/Securities/RegistrationOfProfessionals/EnforcementAdministrativeOrders/2024/20240528MidasAlphaIakovLevin.pdf","name":"dfi.wi.gov","type":"other","credibility":3}],"severity":"medium"},{"content":"On December 30, 2023, Locus Finance vaults were compromised in an exploit that resulted in confirmed losses of $320,964. According to the post-incident disclosure published by the protocol on Medium, the attack was enabled by a developer's private key leak during a period when the development team lacked multisignature wallet protection. The team was transitioning between two CTOs at the time, leaving a single developer key with elevated permissions. The attacker obtained access to the key, which controlled vault upgrade and strategy-change functions, and over approximately six hours developed and executed a strategy to withdraw assets from the protocol vaults directly to attacker-controlled wallets. The incident affected both Ethereum and Arbitrum deployments. Following the hack, Locus secured remaining funds, offered a bounty to the attacker (who was unresponsive), and implemented a new multisig policy requiring three-of-five signatures. The protocol stated it gathered information about the developer responsible in case the incident was an insider attack, and that the developer was cooperative. Some community members alleged the hack may have been fabricated or facilitated from the inside, citing the suspicious timing shortly after the LOCUS token launch's mandatory 30-day lockup period, though this has not been independently verified.","heading":"December 2023 Protocol Exploit","sources":[{"url":"https://medium.com/@locus.finance/explaining-the-locus-hack-actions-taken-and-progress-on-fund-retribution-12761029db56","name":"medium.com","type":"other","credibility":3},{"url":"https://iq.wiki/wiki/locus-finance","name":"iq.wiki","type":"other","credibility":3},{"url":"https://defillama.com/hacks","name":"defillama.com","type":"other","credibility":3}],"severity":"medium"},{"content":"A smart contract security audit of Locus Finance was conducted by SmartState and completed on December 21, 2023 — nine days before the December 30 exploit. SmartState reported that its specialists did not find any vulnerabilities in the audited code following multiple audit iterations and collaborative remediation with the Locus team, and awarded the code a 'high' final security score. The audit covered the protocol's staking system and internal logic. Notably, the exploit that occurred nine days after the audit's completion was not a smart contract vulnerability but rather a private key compromise at the infrastructure level, which would not typically be detected by a code-level smart contract audit. GoPlus analysis has separately identified the LOCUS token contract as a proxy contract in which the contract owner retains the ability to make code changes including disabling sells, changing fees, and minting or transferring tokens.","heading":"Smart Contract Audit","sources":[{"url":"https://smartstate.tech/blog/locus-finance-smart-contract-security-audit-by-smartstate.html","name":"smartstate.tech","type":"other","credibility":3},{"url":"https://docs.locus.finance/information/audits","name":"docs.locus.finance","type":"other","credibility":3}],"severity":"medium"},{"content":"The LOCUS token reached an all-time high of approximately $3.40 on January 3, 2024, shortly after the LBP sale and around the time of the December 2023 exploit. By November 2025, the token had reached an all-time low of approximately $0.031, representing a decline of over 99% from its peak. Daily trading volume on its primary exchange, Camelot V3, has been reported at as low as $14 in a 24-hour period, indicating near-total illiquidity. As of mid-2026, the total TVL locked in Locus protocol contracts is approximately $48,000, placing it at approximately 209th among yield protocols by TVL. The protocol has undergone a stated transition from a retail yield platform to a 'private investment DAO,' with team members described as unpaid volunteers. Former users on Trustpilot and community forums report having experienced total losses after investing in the platform, with complaints including poor accountability, removal of critical community members from Discord/Telegram, and the platform's perceived failure to deliver on its promise to repay Midas investor losses.","heading":"Token Performance and Protocol Decline","sources":[{"url":"https://www.coingecko.com/en/coins/locus-finance","name":"coingecko.com","type":"other","credibility":3},{"url":"https://defillama.com/protocol/locus-finance?denomination=USD","name":"defillama.com","type":"other","credibility":3},{"url":"https://www.trustpilot.com/review/locus.finance","name":"trustpilot.com","type":"other","credibility":3},{"url":"https://coinpaprika.com/coin/locus-locus-finance/","name":"coinpaprika.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Locus Finance has been flagged by on-chain investigator ZachXBT. ZachXBT is a pseudonymous blockchain investigator known for exposing fraud and rug pulls in the crypto industry, who joined Paradigm as an incident response advisor in February 2025. Community members on Trustpilot and Reddit have raised concerns that Locus Finance represents a continuation of the Midas Investments fraud, citing the same founders, a similar revenue model, and alleged misrepresentation of the platform's financial health and recovery prospects. The mintonblock.com report identified locus.finance as an alleged 'offshore scam broker' with non-legitimate withdrawal policies. These community-level claims are assessed as low-to-medium confidence given their reliance primarily on Tier 3 sources, but they are corroborated by verifiable facts including the regulatory enforcement actions against the founder, the significant price collapse of the LOCUS token, and the protocol's near-zero TVL.","heading":"Community and Investigator Flags","sources":[{"url":"https://www.trustpilot.com/review/locus.finance","name":"trustpilot.com","type":"other","credibility":3},{"url":"https://mintonblock.com/blog/is-locus-finance-legit-scam-broker-report/","name":"mintonblock.com","type":"other","credibility":3},{"url":"https://x.com/Locus_finance","name":"x.com","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2018","event":"Iakov Levin (Trevor Levin) founds Midas Investments, a custodial crypto yield platform.","source":"","date_original":"2018-01-01"},{"date":"2021-08","event":"Midas Investments grows from $25 million to $250 million in assets under management within three months.","source":"","date_original":"2021-08-01"},{"date":"2022-12-27","event":"Midas Investments shuts down operations, citing a $63.3 million DeFi portfolio deficit. Investors allege 55% of assets were converted into the proprietary MIDAS token, which subsequently became near-worthless.","source":""},{"date":"2023-04-06","event":"California DFPI issues Desist and Refrain Order against Midas Investments and Iakov Levin for offering unqualified securities in California.","source":""},{"date":"2023-07-26","event":"Locus Finance launches. The protocol attracts $1 million in deposits within 24 hours. Founder Iakov Levin publicly positions Locus as a redemption project for Midas investors.","source":""},{"date":"2023-11-27","event":"LOCUS token LBP sale begins at $4.50/token, running through November 30, 2023, with a mandatory 30-day lock on purchased tokens.","source":""},{"date":"2023-12-21","event":"SmartState completes smart contract security audit of Locus Finance, finding no vulnerabilities and awarding a 'high' security score.","source":""},{"date":"2023-12-30","event":"Locus Finance vaults exploited via developer private key compromise during CTO transition. Losses confirmed at $320,964 across Ethereum and Arbitrum deployments.","source":""},{"date":"2024-01-03","event":"LOCUS token reaches all-time high of approximately $3.40.","source":""},{"date":"2024-05-28","event":"Wisconsin Department of Financial Institutions issues an administrative enforcement order against Midas Alpha and Iakov Levin.","source":""},{"date":"2025-11-14","event":"LOCUS token reaches all-time low of approximately $0.031, a decline of over 99% from its peak.","source":""},{"date":"2026-05","event":"Protocol TVL approximately $48,000. Daily trading volume on primary exchange reported as low as $14. Protocol described as transitioning to a 'private investment DAO' with unpaid volunteer board members.","source":"","date_original":"2026-05-01"}],"sources_used":[{"url":"https://medium.com/@locus.finance/introducing-locus-finance-a-new-era-in-defi-b9ae9048f2d2","name":"medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://iq.wiki/wiki/locus-finance","name":"iq.wiki","type":"other","archive_url":"http://web.archive.org/web/20260514064746/https://iq.wiki/wiki/locus-finance","credibility":3,"archive_timestamp":"2026-05-14T06:47:46+00:00"},{"url":"https://defillama.com/protocol/locus-finance?denomination=USD","name":"defillama.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.theblock.co/post/240980/founder-of-defunct-midas-foundation-launches-new-defi-investment-platform-locus-finance","name":"theblock.co","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://medium.com/@coinness.gl/midas-investments-founder-launches-locus-finance-f6fda3ba2530","name":"medium.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://medium.com/@locus.finance/ama-session-why-should-you-trust-locus-after-midas-9a87c06ea805","name":"medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://bitkan.com/learn/what-happened-to-midas-crypto-is-midas-coin-a-good-investment-18592","name":"bitkan.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://dfpi.ca.gov/enforcement_action/midas-investments/","name":"dfpi.ca.gov","type":"other","archive_url":"http://web.archive.org/web/20260308103429/https://dfpi.ca.gov/enforcement_action/midas-investments/","credibility":3,"archive_timestamp":"2026-03-08T10:34:29+00:00"},{"url":"https://dfpi.ca.gov/wp-content/uploads/sites/337/2023/04/D-R-Midas-Investments.pdf","name":"dfpi.ca.gov","type":"other","archive_url":"http://web.archive.org/web/20251211155053/https://dfpi.ca.gov/wp-content/uploads/sites/337/2023/04/D-R-Midas-Investments.pdf","credibility":3,"archive_timestamp":"2025-12-11T15:50:53+00:00"},{"url":"https://dfi.wi.gov/Documents/Securities/RegistrationOfProfessionals/EnforcementAdministrativeOrders/2024/20240528MidasAlphaIakovLevin.pdf","name":"dfi.wi.gov","type":"other","archive_url":"http://web.archive.org/web/20251106012329/https://dfi.wi.gov/Documents/Securities/RegistrationOfProfessionals/EnforcementAdministrativeOrders/2024/20240528MidasAlphaIakovLevin.pdf","credibility":3,"archive_timestamp":"2025-11-06T01:23:29+00:00"},{"url":"https://medium.com/@locus.finance/explaining-the-locus-hack-actions-taken-and-progress-on-fund-retribution-12761029db56","name":"medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://defillama.com/hacks","name":"defillama.com","type":"other","archive_url":"http://web.archive.org/web/20260818052747/https://defillama.com/hacks","credibility":3,"archive_timestamp":"2026-08-18T05:27:47+00:00"},{"url":"https://smartstate.tech/blog/locus-finance-smart-contract-security-audit-by-smartstate.html","name":"smartstate.tech","type":"other","archive_url":"http://web.archive.org/web/20260316093114/https://smartstate.tech/blog/locus-finance-smart-contract-security-audit-by-smartstate.html","credibility":3,"archive_timestamp":"2026-03-16T09:31:14+00:00"},{"url":"https://docs.locus.finance/information/audits","name":"docs.locus.finance","type":"other","archive_url":"http://web.archive.org/web/20260115145543/https://docs.locus.finance/information/audits","credibility":3,"archive_timestamp":"2026-01-15T14:55:43+00:00"},{"url":"https://www.coingecko.com/en/coins/locus-finance","name":"coingecko.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://www.trustpilot.com/review/locus.finance","name":"trustpilot.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://coinpaprika.com/coin/locus-locus-finance/","name":"coinpaprika.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://mintonblock.com/blog/is-locus-finance-legit-scam-broker-report/","name":"mintonblock.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://x.com/Locus_finance","name":"x.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:36.273986+00:00","updated_at":"2026-08-30T05:14:08.879563+00:00"}}