Venus Core Pool
Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score was recalculated from the page's findings, 54 → 57. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -6.4 |
| Incidents it suffered (e.g. hacks) | -9.6 |
| Problems around it, caused by others | -1.6 |
| Long-running | +10 |
| Sum | 57 |
- 1 section set aside: the claims did not hold up in a fact-check, pending correction.
Score: 57/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-02 · 8 of 12 claims confirmed · 3 need better sources · 1 disputed
anchored·5KDGnA…jBw8Summary
Venus Core Pool is the primary lending market of Venus Protocol, the largest decentralized money market on BNB Chain. The protocol has accumulated over $112 million in cumulative losses across at least five separate security incidents since 2021, including oracle manipulation, a phishing attack draining $27 million from the Core Pool itself in September 2025, and a donation-attack exploit in March 2026 that left $2.15 million in unrecoverable bad debt. A critical vulnerability flagged during a 2023 Code4rena security audit was dismissed by the development team and subsequently exploited twice.
Incidents (1)
- Venus Protocol THE Token Flash-Loan Exploit (March 2026)added 2026-06-07
Connected Entities
11 entities · 60 linked investigations- Filecoin→mentioned with→Binance(70%)
- BNB Chain Bridge→mentioned with→Binance(70%)
- Trust Wallet→mentioned with→Binance(70%)
- Venus Core Pool→mentioned with→BNB Chain Bridge(80%)
- Venus Core Pool→mentioned with→Terra/Luna(80%)
- Venus Core Pool→mentioned with→Bitcoin Cash(80%)
- Venus Core Pool→mentioned with→ZKsync(65%)
- Venus Core Pool→mentioned with→Trust Wallet(80%)
- Venus Core Pool→mentioned with→Chainlink(65%)
- Venus Core Pool→mentioned with→Binance(60%)
- + 3 more
Timeline(11 events)
2020
Venus Protocol launched on BNB Chain by the Swipe Wallet development team, forking Compound and MakerDAO
May 2021
XVS oracle manipulation attack; attacker pumps XVS price from ~$70 to ~$140, borrows ~2,000 BTC and ~5,700 ETH; protocol left with $95 million in bad debt
May 2022
Terra/LUNA collapse causes $14 million in bad debt on Venus due to stale Chainlink price feed with hard-coded $0.10 minimum for LUNA
October 2022
BNB Chain bridge exploiter deposits 900,000 BNB as collateral on Venus to borrow $150 million in stablecoins; BNB Chain governance intervenes to prevent destabilizing liquidation
May 2023
Code4rena audit of Venus Isolated Pools documents donation attack vector under finding M-10; Venus development team dismisses it as 'supported behavior with no negative side effects'
February 2025
Venus ZKSync deployment suffers donation-style exploit on wUSDM market; approximately $717,000 in net bad debt incurred; BNB Chain deployment left unpatched
June 2025
Alleged attacker begins nine-month accumulation of THE (Thena) tokens on Venus, funded via ~7,400 ETH from Tornado Cash; community members allegedly raise concerns; Venus declines to act
2 September 2025
Core Pool exploit: phishing attack tricks large protocol user into approving malicious transaction; approximately $27 million in vUSDT, vUSDC, and BTCB drained from Venus Core Pool
3 September 2025
Venus 'lightning vote' passes with 100% community support; forced liquidation of attacker assets recovers approximately $13.5 million; protocol fully restores services
15 March 2026
Donation attack on vTHE market: attacker donates 36+ million THE directly to vTHE contract, inflates exchange rate 3.81x, borrows ~$14.9 million in assets; THE price collapses; $2.15 million in bad debt remains
19 March 2026
XVS governance token falls approximately 9% following disclosure of bad debt; Venus pauses THE market and reduces collateral factors to zero on six additional markets
Decision Log
- slot 464286398 · hash 3hYSme4uFVufG2DU2hYEj33s7S3DcteumCAGwiiSHGjW
- slot 464286393 · hash GUnM3djSa6Ss9ccro3zKDysEMUXfqmgtWaVax4qe9J3M
- slot 464286387 · hash FGwvJru9cACZpwqoMpU7J9Wpv5okJnLFz2y17iTAQDPz
- slot 455366720 · hash GSTe8txVtPfmnLUAyLz2JiYaFLTdCAgqkSZvk6ocYVME
- slot 422622649 · hash HymKP7mAdCyKBCPqDr9tZG4m6oVHsibsh9ECsfnvfc5B
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 18 of 23 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:24 AM
last updated: 11/2/2026, 12:02:00 AM
6 viewsavoid.net — verified advice for a post-truth world