Skip to main content
AVOID.NET

Evoq Finance

avoid.net/evoq-finance38/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5fCvRV…Dh8C

Summary

Evoq Finance is a peer-to-peer lending optimizer built on BNB Chain that routes deposits through Venus Protocol to match suppliers and borrowers directly, aiming for improved capital efficiency. On September 10, 2025, the protocol suffered a critical security incident in which an attacker compromised the owner's private key, used the transferOwnership function to seize contract control, and upgraded the proxy contract to a malicious version, draining approximately $420,000 from both the protocol and user-approved accounts. Following the exploit, the protocol's total value locked collapsed to near zero and no verified public post-mortem or recovery plan has been identified. ZachXBT has flagged this entity.

Connected Entities

3 entities · 60 linked investigations
Organizations
Protocols
Evoq Finance
Relationships
  • Evoq Financementioned withEthereum(60%)
  • Evoq Financementioned withBinance(80%)
  • Binancementioned withEthereum(65%)
Have evidence about Evoq Finance?

Timeline(7 events)

28 October 2024

Evoq Finance selected for Binance Most Valuable Builder (MVB) Season 8 accelerator program, described as a 'pool-based P2P lending protocol that leverages Venus protocol on BSC.' Program kicked off in Dubai.

12 December 2024

HashDit completes a security audit of Evoq Finance's smart contracts.

9 January 2025

Zokyo completes a second security audit of Evoq Finance's smart contracts.

2025

Evoq Finance publishes its 2025 roadmap targeting Q1 mainnet open beta, Q2 public audit, Q3 token generation event, and Q4 multi-protocol expansion.

10 September 2025

Evoq Finance smart contract on BNB Chain exploited. Attacker compromises the owner private key (EOA 0xF08d1c), transfers contract ownership to attacker address 0x7b416F, upgrades proxy to malicious implementation, and drains approximately $420,000 from the protocol and user-approved accounts. GoPlus Security issues a public alert.

10 September 2025

GoPlus Security and multiple crypto news outlets urge users to revoke token approvals for contract 0xF9C74A65B04C73B911879DB0131616C556A626bE. Post-incident security recommendations include multisignature controls and key rotation.

10 September 2025

Evoq Finance TVL collapses to near zero following the exploit. Active loans fall to $0 on DefiLlama.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 13 of 18 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:15 AM

last updated: 8/30/2026, 3:55:36 PM

4 views

avoid.net — verified advice for a post-truth world