Deep Dive
1. Security Foundation Emphasis (10 August 2026)
Overview: The team highlighted its multi-layered security approach, reassuring users about the smart contract infrastructure. This isn't a new code update but a public reaffirmation of existing practices.
The protocol's core contracts have been audited by firms like Trail of Bits and Quantstamp. The code is open-source and available on GitHub for public verification, and it's built natively for the TON blockchain to optimize performance and security.
What this means: This is neutral for $EVAA because it reinforces existing security promises rather than announcing new fixes or features. For users, it means the team is communicating its commitment to security, but the actual safety of funds depends on the unresolved issues noted in earlier audits.
(EVAA Protocol)
2. Critical Audit Findings (17 May 2026)
Overview: An independent security audit revealed significant vulnerabilities in the live protocol's code, including a critical bug that could allow borrowers to block liquidations.
The report cited a specific line of code (if (state < 0) { return(); }) that could let undercollateralized borrowers withdraw funds and avoid liquidation, potentially leaving lenders with bad debt. It also highlighted extreme centralization, with a 30-second upgrade timelock and single-admin control.
What this means: This is bearish for $EVAA because it exposes unresolved critical risks that could directly lead to user losses. The fact that the GitHub issue was reported as open for 15 months without a fix raises serious concerns about development responsiveness and protocol safety.
(Meta Financial AI)
3. KuCoin Exchange Listing (5 October 2026)
Overview: EVAA was listed for spot trading on KuCoin, a major centralized exchange. This expands accessibility and liquidity but is not a direct codebase update.
Trading began on 5 October 2026, following a call auction. The listing provides another venue for trading but does not alter the protocol's underlying smart contracts or functionality.
What this means: This is neutral for $EVAA because while it improves market access and visibility, it doesn't address the fundamental technical risks or development activity within the codebase itself. It may attract more traders but doesn't make the protocol more secure or feature-rich.
(CoinMarketCap)
Conclusion
The most recent technical communication focuses on security assurances, but the last substantive codebase insight was a concerning external audit from May 2026 that highlighted unpatched critical vulnerabilities. For the latest code commits and fixes, monitoring EVAA's official GitHub repository is essential. Has the team addressed the critical liquidation bug since the audit was made public?