Echelon Market

Orange · 66/100

Executive summary

Echelon Market is a Move-based decentralized lending protocol deployed on Aptos, Movement, and Initia, scoring 70/100 (green band) with high data confidence (84/100).

  • Security: Six audits from OtterSec, Zellic, Quantstamp, Plainshift, and Code4rena (January 2024–January 2026) covering core lending, isolated pools, LPT integration, fixed-yield, and cross-chain deployments; findings included 2 high-severity issues (OtterSec May 2025) and 2 high-severity issues (Zellic January 2025), with most marked resolved or acknowledged; however, deployed-code match to current mainnet contracts is Not verifiable as of September 5, 2026, and several acknowledged issues remain without fixes.
  • Incidents: No documented exploit or loss event was found in available sources; the protocol claims a $250,000+ bug bounty program, but payout history and scope details are Not verifiable as of September 3, 2026.
  • Governance & custody: Protocol is non-custodial with user-controlled wallets; asset listing is initially controlled by the core team with planned transition to token-holder governance, but DAO functionality, voting parameters, and on-chain governance execution are Not verifiable as of September 13, 2026; legal entity, jurisdiction, and founder identities are Not verifiable as of September 3, 2026, making the team effectively semi-anonymous despite Aptos Foundation incubation and $3.5M seed funding.
  • Top risks: Smart-contract defects (acknowledged audit findings and unverified deployed-code coverage), oracle dependency (Chainlink, Pyth, Switchboard, Thala feeds; Pyth Aptos support status contradicts documentation as of August 26, 2026), liquidation shortfalls with socialized bad debt, privileged admin/upgrade controls (Not verifiable as of September 5, 2026), and multi-chain bridge/integration risk across Aptos, Movement, and Initia; collateral includes stablecoins (USDC, USDT, sUSDe, zUSDC/zUSDT), LSTs (sthAPT, stAPT), and xLPT with circuit-breaker withdrawal pauses.
  • Strengths: Capital-efficient E-Mode for correlated assets, modular isolated-risk markets limiting contagion, multi-chain Move deployment broadening liquidity, broad asset support including yield-bearing collateral for looping strategies, and Move's resource-oriented security model; TVL reported at $8.9M (protocol homepage) with conflicting third-party figures up to $194.5M (Not verifiable as of September 3, 2026).
  • Unverified: On-chain TVL, utilization, reserves, collateral composition, liquidation thresholds, admin/upgrade controls, multisig configuration, timelock delays, treasury balances, token supply/allocations, and governance voting parameters are all Not verifiable as of September 5, 2026 due to unavailable Dune/on-chain tooling; Pyth oracle integration status conflicts with Pyth's documented Aptos deprecation.
  • Recommended exposure: Limit to <2% of portfolio as exploratory allocation given semi-anonymous team, unverified governance, and residual audit findings; require independent on-chain verification of admin controls, deployed-code audit coverage, oracle health (especially Pyth status), and collateral/debt distribution before scaling; monitor xLPT circuit-breaker events and cross-chain bridge dependencies; avoid exposure during high utilization or oracle outages.
  • Open questions: Verify deployed Move package addresses and upgrade authority on Aptos/Initia/Movement; confirm Pyth oracle migration or replacement post-August 2026 Aptos deprecation; obtain current on-chain TVL, collateral breakdown, and liquidation-threshold distribution; verify DAO governance implementation and token-holder control over parameters; identify legal entity, jurisdiction, and founder identities; confirm multisig/timelock configuration for admin keys; assess reserve adequacy and bad-debt socialization history; validate audit remediation status and bytecode match to production contracts.

Score

Component Weight Raw Points Reason
Security 20% 100 20.0 10 audit(s); fresh audit bonus; active bug bounty bonus
Audits 20% 80 16.0 full audit within 365 days (latest 2026-01-08); auditor not in top-20 -20
Incidents 20% 100 20.0 no open incidents
Governance 20% 50 10.0 no DAO governance
TVL 20% 0 0.0 TVL $7,720,491 = 0% of reference ($17,538,184,136)
Data confidence 84 7/7 critical categories; 10/47 verified facts; 47/47 fresh (180d)

Identification

protocol identification

two sources

Echelon Market is a decentralized, non‑custodial lending protocol built in Move, operating as a core money market for the Aptos and broader Move ecosystem. Not verifiable as of 2026-09-03: any on-chain data or Dune query references. Protocol identification

  • Name: Echelon Market
  • Category: DeFi lending/borrowing money market with isolated markets and capital‑efficient design inspired by Aave’s E‑Mode.
  • Website / app: echelon.market (marketing site) and app.echelon.market (front‑end).
  • Docs: docs.echelon.market.
  • Chains:
  • Aptos mainnet (primary deployment).
  • Movement/M2 (MoveVM chain).
  • Initia: Echelon operates both as a lending protocol on Initia and as a MoveVM appchain / rollup (“Echelon chain”) in Initia’s “Interwoven Stack”.
  • Launch timing: Echelon v1 went live on Aptos mainnet in March–April 2024; Aptos ecosystem and project posts state “live on mainnet in 2024” and “since launching in April this year”.
  • Native token: Aptos Foundation coverage describes “Echelon Market Token” but does not provide a ticker or contract address; token details are therefore not verifiable as of 2026-09-03 beyond existence. Main contract addresses & verification
  • Aptos main lending hub: Docs and SDK both point to
  • 0xc6bc659f1649553c1a3fa05d9727433dc03843baac29473c817d06d39e7621ba as the Echelon mainnet address on Aptos.
  • The SDK example instantiates EchelonClient with this address to fetch all markets, indicating it is the protocol’s core registry/market contract.
  • Explorer verification status, Initia/Echelon‑chain contracts, and Movement addresses: Not verifiable as of 2026-09-03 under current constraints. Fork lineage & design
  • Multiple independent sources state Echelon is “inspired by Aave’s E‑Mode” and implements high capital‑efficiency isolated markets, but they describe it as purpose‑built in Move, not a direct Solidity fork.
  • No source explicitly labels Echelon as a fork of Aave or any other money market; available information supports the view that it is an original Move implementation borrowing architectural concepts, not a code fork.
  • Audit status: Aptos ecosystem write‑up notes “Echelon v1 is audited and live on Aptos mainnet as of March”, without naming the auditor or linking the report. Lacking the report on an auditor’s own site, this is an unverified marketing claim.
  • Malicious‑modification or exploit history in related forks: Not verifiable as of 2026-09-03; no independent media or analytics result in the collected data mentions fork‑related malicious changes. Chain exposure note
  • DefiLlama lists Echelon Market on Aptos only in the retrieved result, showing TVL on Aptos but not on Initia/Movement in that snapshot, indicating Aptos remains the primary TVL locus; exact amounts are analytics-platform estimates, not on‑chain verified.
Evidence (15)

maturity

two sources

Echelon Market appears to be a real, functioning product rather than just a landing page: the official site is live, the docs site is extensive, and a dashboard exists at app.echelon.market/dashboard with wallet-connect functionality and views for supplies, borrowings, and open positions. The docs also describe deposit and withdrawal flows for supplying assets and redeeming them, which is consistent with a live lending/borrowing app, not a brochure-only site. The maturity signal is moderate, not fully proven from web checks alone: Aptos Foundation lists Echelon as a web/iOS/Android platform, and the developer documentation references an SDK and a mainnet address, which suggests a non-trivial integration surface.

There is also a protocol terms page that explicitly mentions APIs as part of the platform, but the public documentation surfaced here does not clearly expose an open, public API endpoint or unauthenticated developer API spec, so open API availability is not verifiable as of 2026-09-03. No clear evidence of broken links, fake metrics, or template-site behavior appeared in the retrieved sources, but that absence is not a guarantee; those checks are not fully verifiable as of 2026-09-03.

Evidence (7)

Security

bug bounty

one source

Echelon Market appears to have an active bug bounty program. Public sources describe it as a vulnerability disclosure / bug bounty effort with rewards based on severity; one source says critical findings should be sent by email, another says the project is running a bounty with rewards from $500 for low-severity issues to $10,000 for critical vulnerabilities, and the protocol homepage advertises a $250,000+ bug bounty. The start date is Not verifiable as of 2026-09-03.

Publicly visible parameters: severity-based rewards, critical reports via email, and KYC may apply in the broader security/disclosure process on related GitHub security pages; exact scope, eligible assets, and formal rules are Not verifiable as of 2026-09-03. Reported results: Not verifiable as of 2026-09-03; no public bounty payout or resolved-bug tally was found in the gathered sources.

Active
Yes
Platform
email / public disclosure policy; no third-party bounty platform confirmed
Max payout
$250K
Since
2026-09-03
Evidence (4)

counterparty risks

unverified

As of September 5, 2026: Dune/on-chain verification is unavailable; therefore chain-by-chain TVL, collateral, bridge balances, counterparty concentration, and exposure percentages are Not verifiable as of 2026-09-05. Dependencies and scenarios

  • Oracles — high criticality: Echelon documents Chainlink, Pyth, Switchboard, and custom Thala feeds, with fallbacks and market-specific oracle selection. Oracle outage, stale data, provider disagreement, or thin-liquidity manipulation could cause erroneous liquidations, under-liquidation, or bad debt. The documented DEX/CEX fallback increases dependence on external market prices and operators.
  • Potential oracle-status contradiction: Echelon’s documentation still presents Pyth as an active Aptos dependency, while Pyth’s current Aptos guide states that Pyth Core no longer supports Aptos as of August 26, 2026. Whether Echelon migrated, uses another Pyth deployment, or is affected is Not verifiable as of 2026-09-05. This is a material stale-documentation/integration risk.
  • Stablecoins and wrapped assets: Listed markets include USDC, USDT, USD1, sUSDe, zUSDT/zUSDC, whUSDC, MOD, and wrapped BTC/ETH assets. Risks include issuer insolvency, reserve impairment, bridge-wrapped-token failure, liquidity fragmentation, and depeg-driven liquidations. sUSDe additionally carries Ethena/USDe collateral and yield-source risk.
  • LST/restaking exposure: sthAPT and stAPT depend on staking providers, redemption mechanics, exchange-rate/oracle calculations, and possible LST depegs. Echelon explicitly supports elevated LTVs for LST markets, amplifying liquidation and bad-debt sensitivity.
  • Bridges and appchains: Echelon Chain is described as an Initia-based appchain using LayerZero and IBC for onboarding assets, with native USDC/CCTP; Initia’s OPinit bridge also relies on operators/executors for message and oracle updates. Bridge halt, validator/operator compromise, replay, or liquidity loss could strand collateral.
  • Custodians, CEX/MMs, RWA: No independently verified current custodian, CEX/MM concentration, or active RWA issuer/SPV exposure was found. USDY/RWA collateral appears as a planned ecosystem feature, not confirmed current exposure. Not verifiable as of 2026-09-05. Assessment: dependency risk is elevated, concentrated in oracle correctness, stablecoin/wrapped-asset solvency, LST pricing, and cross-chain infrastructure. A depeg or oracle outage can socialize losses across the affected lending pool, per Echelon’s documented mechanics.
Evidence (5)

crypto custody

unverified

Echelon Market is described in its docs as a decentralized, non-custodial lending protocol, and its terms say users retain control of deposited assets and the team does not have access to users’ private keys. That supports a non-custodial custody model rather than a third-party custodian model. The available sources do not verify whether assets are segregated at the wallet/account level across Aptos, Echelon Initia, and Move deployments, so that remains Not verifiable as of 2026-09-05.

Withdrawal status is also not verifiable as of 2026-09-05; no reliable source in the gathered material shows withdrawals are paused.

Evidence (2)

incident

one source

No incident since launch is clearly documented in the provided sources. The only directly relevant source says Echelon Market’s team is running a bug bounty for new mechanics, but it does not report an exploit, loss, affected users, reimbursement, or a post-incident fix, so incident details are not verifiable as of 2026-08-28.

Date
2026-08-28
Cause
Other
Evidence (1)

key management

one source

Echelon Market’s key management is organized as a governance-controlled, non-custodial protocol parameter system, not as a user-held custody or enterprise KMS model. The protocol documentation says Echelon is a decentralized, non-custodial lending protocol deployed on Aptos, Movement, and Initia, and that asset onboarding is initially overseen by the core team before transitioning to an Asset Listing Governance Team guided by Echelon token holders. For lending-market risk and configuration, key controls are set per market/asset rather than through one global policy.

Echelon states that max LTV, liquidation thresholds, liquidation bonuses, reserve factors, supply caps, borrow caps, and interest rate models are defined per asset/market, with isolated markets operating under separate requirements and functions. Operationally, this means “key management” in the protocol context is organized around who can list assets and set risk parameters:

  • Core team handles initial asset onboarding.
  • Governance / token holders ultimately direct asset listing policy via the Asset Listing Governance Team.
  • Per-market risk settings constrain how each asset can be used in lending and borrowing. I could not verify any off-chain cryptographic key custody, multisig signer layout, or admin key rotation process from the provided sources. Not verifiable as of 2026-09-03.
Evidence (4)

smart-contract

two sources

Assessment — as of September 5, 2026 Conclusion: High residual admin/upgrade uncertainty. Echelon is a Move lending protocol deployed across Aptos, Movement/“Move,” and Initia; the public architecture is package/module-based rather than EVM proxy-based. Public SDK material identifies an Aptos package address 0xc6bc659f1649553c1a3fa05d9727433dc03843baac29473c817d06d39e7621ba, but the complete production module-address inventory and code hashes are Not verifiable as of September 5, 2026. Architecture map ``text User wallet │ ├─ Aptos deployment ─┐ ├─ Initia deployment ├─ Move packages/modules └─ Movement/Move ────┘ │ ├─ lending/market state ├─ oracle and liquidation logic ├─ vault/asset accounting └─ governance/deployer authority `` Controls and exit risk: Exact admin/owner accounts, package upgrade policy, multisig or single-key configuration, pause authority, fee setters, oracle setters, strategy/vault withdrawal functions, renounced roles, and timelock delay are Not verifiable as of September 5, 2026.

Dune decoded-event checks were unavailable; therefore no proxy-admin type, role history, or on-chain delay is asserted. There is no evidence sufficient to conclude that users can exit during an admin pause, oracle failure, package upgrade, or liquidity shortage. Worst case from compromised privileged keys is malicious parameter/oracle changes, market suspension, denial of withdrawals, or replacement of Move package logic; direct arbitrary draining is not established. Audit coverage: Public records show multiple audits, including Zellic’s January 2025 Initia/Movement deployment review and later core-lending/fixed-yield/token reviews.

Zellic reported 0 critical, 2 high, 1 medium, 1 low, and 1 informational finding for its reviewed scope; current remediation and equivalence to live deployments are Not verifiable as of September 5, 2026. Risk flags: No verified timelock; no verified immutable/renounced admin; no verified emergency-withdrawal path; no verified chain-by-chain authority separation. Treat admin compromise as potentially protocol-wide per affected chain. Official claims such as “non-custodial,” “permissionless,” and “6+ audits” remain partly unverified marketing claims absent live-code and role verification.

Audited deployment
Yes
Evidence (5)

audit

one source

Echelon’s audits page cites Code4rena (Zenith) with scope Core Lending, date January 2025, and a report file Zenith Audit Report- Echelon (2).pdf. This appears to be a competitive audit or wardens program for the main lending contracts. Bytecode match to mainnet deployments is Not verifiable as of 2026-09-03.

Auditor
Code4rena (Zenith)
Report date
2025-01-01
Scope
Core Lending contracts for Echelon on Move-based chains (Aptos initially; likely relevant to later Movement / Initia deployments).
Findings
The accessible snippet does not show the distribution of issues (critical/high/medium); findings are Not verifiable as of 2026-09-03.[1]
Fix status
Not verifiable as of 2026-09-03 (no direct access to Code4rena Zenith report contents or remediation evidence).
Evidence (2)

audit

unverified

Report: Zenith Audit Report — Echelon; auditor: Code4rena/Zenith; report date: January 2025; scope: core lending; link: https://docs.echelon.market/echelon/operations/audits; deployed-code coverage: Not verifiable as of September 4, 2026. Findings: Not verifiable as of September 4, 2026. Fix status: Not verifiable as of September 4, 2026.

Auditor
Code4rena (Zenith)
Report date
2025-01
Scope
Core Lending
Findings
Not verifiable as of September 4, 2026.
Fix status
Not verifiable as of September 4, 2026. Current deployed-code match Not verifiable as of September 4, 2026.
Evidence (1)

audit

one source

Corrected prior remediation status: OtterSec’s May 8, 2025 Core Lending assessment reports 17 findings: 0 critical, 2 high, 3 medium, 5 low, 7 informational. All 10 listed vulnerabilities were marked RESOLVED, with named fix commits; seven general findings were recommendations without individual resolution statuses. Scope was echelon-modules, commit d5b0dd2, focused on isolated lending.

Current deployed-code match: Not verifiable as of September 5, 2026.

Auditor
OtterSec
Report date
2025-05-08
Scope
Core lending / echelon-modules on Aptos; commit d5b0dd2; isolated lending, lending core, leverage and farming logic
Findings
0 critical, 2 high, 3 medium, 5 low, 7 informational; 17 total.
Fix status
All 10 vulnerabilities marked RESOLVED with patch commits; seven general findings have no individual resolution status. Current deployed-code match Not verifiable as of September 5, 2026.
Report url
https://resources.cryptocompare.com/asset-management/21595/1770047869158.pdf
Report id
doc:95882b59b2f9bbe1
Unresolved critical
0
Unresolved high
0
Evidence (2)

audit

one source

Corrected prior record: OtterSec’s LPT report date is April 18, 2025 (assessment conducted April 6–10), not April 10. Scope: echelon-staked-lpt, PR #271, adding Thala staked-LPT collateral support. Findings: 0 critical, 0 high, 1 medium, 0 low, 0 informational.

The sole medium issue—borrowing undervalued xLPT due to oracle mispricing—was marked RESOLVED and fixed in commit 332854e. Current deployed-code match: Not verifiable as of September 5, 2026.

Auditor
OtterSec
Report date
2025-04-18
Scope
LPT / staked-LPT integration on Aptos; echelon-staked-lpt PR #271
Findings
0 critical, 0 high, 1 medium, 0 low, 0 informational.
Fix status
Medium finding marked RESOLVED; fixed in commit 332854e. Current deployed-code match Not verifiable as of September 5, 2026.
Report url
https://937373228-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F50Y882uZP2fEhbjAMSgn%2Fuploads%2FDxl6TvMCo4dvghEIHzTL%2Fechelon_staked_lpt_audit_final.pdf?alt=media&token=b17d2068-40c8-44c6-8fb1-1270cfd8f17b
Report id
doc:dbed84536ec17b2c
Unresolved critical
0
Unresolved high
0
Evidence (1)

audit

one source

Corrected prior record: Zellic’s Isolated Pools report was published July 1, 2024, not merely “July 2024.” Scope: Aptos Move echelon-modules, isolated_lending, commit 80e49b1. Findings: 0 critical, 0 high, 2 medium, 1 low, 0 informational. Remediation: one medium acknowledged with fix commit f7ff1ced; the second medium was acknowledged as an intentional admin control with no fix; the low finding’s remediation was not verifiable.

The report states reviewed code was not deployed to Aptos mainnet. Current deployed-code match: Not verifiable as of September 5, 2026.

Auditor
Zellic
Report date
2024-07-01
Scope
Aptos Move isolated lending pools; isolated_lending; commit 80e49b116bd9b500de118c12416e0a885b971067
Findings
0 critical, 0 high, 2 medium, 1 low, 0 informational.
Fix status
One medium acknowledged with fix commit f7ff1ced; one medium acknowledged without a fix because Echelon retained the mechanism; low-finding remediation Not verifiable as of September 5, 2026.
Report url
https://resources.cryptocompare.com/asset-management/21595/1770049206763.pdf
Report id
doc:f8720d7cb3e5bb42
Unresolved critical
0
Unresolved high
0
Evidence (2)

audit

one source

Echelon’s docs list several OtterSec audits covering the Core Lending modules and LPT (Liquidity Pool Token) integration across 2024–2025. These relate to the Aptos/Move money market that later extends to Movement and Initia. Exact bytecode-match to deployed contracts on Aptos, Initia, or Movement cannot be on-chain verified here, so deployed-code coverage is Not verifiable as of 2026-09-03.

Auditor
OtterSec
Report date
2024-03-01
Scope
Core Lending modules (March 2024) and LPT integration / Core Lending updates (April–May 2025) for Echelon on Aptos/Move.[1]
Findings
The Echelon audits page lists report files (e.g. `echelon_v1_modules_audit_final.pdf`, `echelon_audit_final.pdf`, `echelon_staked_lpt_audit_final.pdf`) but the contents (number of critical/high/medium issues) are not visible in the snippet.[1] Not verifiable as of 2026-09-03.
Fix status
Not verifiable as of 2026-09-03 (no direct view of OtterSec PDFs; no independent remediation status; no on-chain inspection).
Evidence (2)

audit

unverified

Audit of Core Lending. The docs page lists this report as March 2024. The snippet does not expose issue counts, fix status, or bytecode-match evidence, so those fields are Not verifiable as of 2026-08-28.

Auditor
Ottersec
Report date
2024-03
Scope
Core Lending; Bytecode-match note: Not verifiable as of 2026-08-28.
Evidence (1)

audit

one source

Report: Echelon Staked LPT Security Assessment; auditor: OtterSec; report date: April 10, 2025; scope: LPT/staked-LPT integration on Aptos; link: https://937373228-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F50Y882uZP2fEhbjAMSgn%2Fuploads%2FDxl6TvMCo4dvghEIHzTL%2Fechelon_staked_lpt_audit_final.pdf?alt=media&token=b17d2068-40c8-44c6-8fb1-1270cfd8f17b; deployed-code coverage: current deployment match Not verifiable as of September 4, 2026. Findings: Critical 0, High 0, Medium 1, Low 0, Informational 0. Fix status: Not verifiable as of September 4, 2026.

Auditor
OtterSec
Report date
2025-04-10
Scope
LPT / Staked LPT integration on Aptos
Findings
0 critical, 0 high, 1 medium, 0 low, 0 informational.
Fix status
Not verifiable as of September 4, 2026. Current deployed-code match Not verifiable as of September 4, 2026.
Evidence (1)

audit

unverified

Audit of LPT (Liquidity Pool Token) Integration. The docs page lists the report date as April 2025. Finding counts, remediation status, and deployed-code coverage are Not verifiable as of 2026-08-28 from the available snippet.

Auditor
Ottersec
Report date
2025-04
Scope
LPT (Liquidity Pool Token) Integration; Bytecode-match note: Not verifiable as of 2026-08-28.
Evidence (1)

audit

unverified

Audit of Core Lending. The docs page lists this report as May 2025 and separately lists an earlier Ottersec Core Lending audit from March 2024. The docs page does not provide finding counts or fix-status details in the snippet, so critical/high/medium counts are Not verifiable as of 2026-08-28.

Auditor
Ottersec
Report date
2025-05
Scope
Core Lending; intended to cover deployed code for the Core Lending release referenced by the protocol docs. Bytecode-match note: Not verifiable as of 2026-08-28.
Evidence (2)

audit

one source

Report: Echelon Comprehensive Security Assessment; auditor: Plainshift; report date: October 29, 2025; scope: fixed-yield/yield-trading, math and oracle modules on Aptos Move; link: https://resources.cryptocompare.com/asset-management/21595/1770047838306.pdf; deployed-code coverage: current deployment match Not verifiable as of September 4, 2026. Findings: Critical 0, High 1, Medium 3, Low 2, Informational 5. Fix status: Not verifiable as of September 4, 2026.

Auditor
Plainshift
Report date
2025-10-29
Scope
Core Fixed Yield / yield trading, math and oracle modules
Findings
0 critical, 1 high, 3 medium, 2 low, 5 informational.
Fix status
Not verifiable as of September 4, 2026. Current deployed-code match Not verifiable as of September 4, 2026.
Evidence (1)

audit

one source

Report: Plainshift Echelon Coin (ELON) Comprehensive Security Assessment; auditor: Plainshift; report date: January 8, 2026; scope: ELON coin module on Aptos; link: https://resources.cryptocompare.com/asset-management/21595/1770047441331.pdf; deployed-code coverage: current deployment match Not verifiable as of September 4, 2026. Findings: Critical 0, High 0, Medium 0, Low 0, Informational 3. Fix status: all 3 informational findings acknowledged; no severe issues reported.

Auditor
Plainshift
Report date
2026-01-08
Scope
ELON Token / Aptos Move coin module
Findings
0 critical, 0 high, 0 medium, 0 low, 3 informational.
Fix status
All findings acknowledged; no severe issues identified. Current deployed-code match Not verifiable as of September 4, 2026.
Evidence (1)

audit

unverified

The Echelon docs audits page lists a Quantstamp report with scope Core Lending, date April 2025, and a file name Echelon_Final_Report.pdf. This is positioned as a later audit of the main lending protocol, likely on Aptos/Move. Whether this report covers the exact bytecode currently deployed is Not verifiable as of 2026-09-03.

Auditor
Quantstamp
Report date
2025-04-01
Scope
Core Lending smart contracts for Echelon (Aptos / MoveVM) as of April 2025.[1]
Findings
The snippet does not expose Quantstamp’s findings table; counts of critical/high/medium issues are Not verifiable as of 2026-09-03.[1]
Fix status
Not verifiable as of 2026-09-03 (no access to full Quantstamp PDF; no independent remediation tracking or on-chain confirmation).
Evidence (1)

audit

unverified

Audit of Core Lending. The docs page lists this report as April 2025. No issue breakdown or fix-status data is visible in the provided result, so critical/high/medium findings and whether the audit covers deployed code are Not verifiable as of 2026-08-28.

Auditor
Quantstamp
Report date
2025-04
Scope
Core Lending; Bytecode-match note: Not verifiable as of 2026-08-28.
Evidence (1)

audit

unverified

Report: Echelon audit; auditor: Zellic; report date: July 2024; scope: isolated pools; link: https://docs.echelon.market/echelon/operations/audits; deployed-code coverage: Not verifiable as of September 4, 2026. Findings: Not verifiable as of September 4, 2026. Fix status: Not verifiable as of September 4, 2026.

Auditor
Zellic
Report date
2024-07
Scope
Isolated Pools
Findings
Not verifiable as of September 4, 2026.
Fix status
Not verifiable as of September 4, 2026. Current deployed-code match Not verifiable as of September 4, 2026.
Evidence (1)

audit

one source

A second Zellic audit listed in the docs has scope Initia & Movement Deployment, date January 2025, file Echelon - Zellic Audit Report Jan 2025.pdf. This targets the cross-chain deployments to Initia and Movement environments. Whether that report covers all currently live Initia / Movement contracts and matches deployed bytecode is Not verifiable as of 2026-09-03.

Auditor
Zellic
Report date
2025-01-01
Scope
Initia & Movement Deployment smart contracts for Echelon (bridge/orchestration and/or lending on these MoveVMs).
Findings
The audit listing shows only meta-data; counts of critical/high/medium issues and details of cross-chain findings are Not verifiable as of 2026-09-03.[1]
Fix status
Not verifiable as of 2026-09-03 (no direct access to Zellic January 2025 PDF; no independent remediation tracking).
Evidence (2)

audit

one source

Report: Echelon audit; auditor: Zellic; report date: January 16, 2025; scope: Initia and Movement deployment components; link: https://reports.zellic.io/publications/echelon/; deployed-code coverage: reviewed repositories/commits are identified, but current deployed-code match is Not verifiable as of September 4, 2026. Findings: Critical 0, High 2, Medium 1, Low 1, Informational 1. Fix status: Not verifiable as of September 4, 2026.

Auditor
Zellic
Report date
2025-01-16
Scope
Initia & Movement deployment; echelon_oracle and initia_deploy components
Findings
0 critical, 2 high, 1 medium, 1 low, 1 informational.
Fix status
Not verifiable as of September 4, 2026. Current deployed-code match Not verifiable as of September 4, 2026.
Evidence (1)

audit

unverified

Audit of Initia & Movement Deployment. The docs page lists this report as January 2025. Critical/high/medium counts, remediation status, and whether the reviewed code matches deployed bytecode are Not verifiable as of 2026-08-28 from the available snippet.

Auditor
Zellic
Report date
2025-01
Scope
Initia & Movement Deployment; Bytecode-match note: Not verifiable as of 2026-08-28.
Evidence (2)

Team & Reputation

founders

two sources

Echelon Market appears to be a credible but still relatively young, VC‑backed Move‑native lending protocol, with a semi‑public team and strong ecosystem ties, but limited traditional corporate transparency. Not verifiable as of 2026‑09‑03 for full legal entity and founder identity details. ### Founders & team

  • None of the ecosystem, listings, docs or GitHub sources name specific founders or C‑level individuals; the project presents itself as “built by a team of DeFi natives” without attaching real‑world identities, so the core team should be treated as effectively semi‑anon from a risk standpoint.
  • The protocol was incubated through Thala Foundry (Thala Labs + Aptos Foundation), which implies close technical and business support from established Aptos ecosystem actors, but does not itself reveal founder names.
  • GitHub shows activity from handles such as “egoleg” and automated bots, but these are developer pseudonyms, not doxxed identities. ### Prior projects / track record
  • Public materials and ecosystem posts frame Echelon as a core lending layer for Move DeFi, launched on Aptos mainnet in 2024 and later expanded to Movement and an Initia rollup; prior projects of the team are not disclosed.
  • Echelon has participated in Aptos Foundation’s LFM growth program and Thala Foundry incubator, which adds ecosystem credibility but is not a substitute for a personal founder track record. ### Public vs anon; credibility
  • Absence of named founders, executives, or physical office locations in public materials implies no fully public leadership. Risk profile: closer to “professional but pseudonymous DeFi team” than to a registered, onshore financial institution.
  • Credibility signals:
  • Multiple institutional/crypto‑native investors (e.g., Amber Group, Selini Capital, Saison Capital, Laser Digital, Re7 Capital, others) according to SoSoValue; this is third‑party analytics and should be treated as *aggregator data*, not on‑chain fact.
  • Listings and ecosystem features by Aptos Foundation, Gate DEX and others, plus substantial reported TVL growth, indicate market traction but not legal robustness. ### Legal entity, office, jurisdiction
  • No clear information on registered company, jurisdiction, or office address is available in ecosystem or documentation pages; likely structure is an offshore, crypto‑native entity or DAO‑like setup, but this is speculative.
  • Therefore, status of “real office”, “onshore vs offshore”, and “real business vs pure web front” is Not verifiable as of 2026‑09‑03. ### Risk takeaway For institutional DeFi risk, treat Echelon Market as:
  • Technically credible, ecosystem‑endorsed Move lending protocol with multiple investors; but
  • Founder‑anon/semi‑anon, with opaque corporate structure and no confirmed physical presence. This combination warrants enhanced counterparty, governance, and legal‑risk controls if interacting at scale.
Evidence (9)

general reputation

two sources

Echelon Market appears to be a Move-based lending protocol deployed on Aptos, Movement, and Initia, with the strongest non-protocol confirmation coming from Aptos ecosystem pages and the protocol’s own docs. Aptos states Echelon was incubated via Thala Foundry (Thala Labs + Aptos Foundation) and later raised a $3.5M seed round led by Amber Group with participation from Laser Digital, Saison Capital, LayerZero, Gate Ventures, and Re7 Capital. Aptos also says Echelon v1 is audited and live on Aptos mainnet, and the protocol’s audit page lists a January 2025 Zellic audit for the Initia/Movement deployment.

Reputation is generally positive in the Aptos ecosystem: the project is described as a core lending layer and as a Move-native DeFi builder, which is consistent with public ecosystem coverage. However, the protocol website’s “6+ audits” claim is unverified marketing unless independently cross-checked; only the Zellic audit was directly visible in the accessible source set. I did not find credible evidence of fraud, rug pulls, insolvency, sanctions, or formal legal/regulatory action against this protocol or its founders in the retrieved sources.

Not verifiable as of 2026-09-03. The only “Echelon” legal/regulatory items surfaced were unrelated firms with the same name, including a Canadian broker-dealer action and OFAC sanctions against Russian entities, so name-collision risk is material and those should not be attributed to Echelon Market. Unresolved concerns: founder identity and governance structure were not clearly established in the accessible sources, and independent audit coverage beyond the Zellic reference was not verifiable as of 2026-09-03.

Public sentiment looks mixed-to-positive in ecosystem media, but primary-source verification is limited outside the Aptos ecosystem and protocol materials.

Evidence (7)

Economy

TVL: $7.7M

model

one source

Strategy / assets / yield. Echelon is primarily an overcollateralized lending market with isolated pairs: users supply assets or yield-bearing collateral, borrowers pay variable interest, and lenders receive interest-based supply yield. It also offers fixed-yield PT/SY/YT markets: PT locks a fixed rate until maturity, while YT provides leveraged exposure to the underlying yield. Supported exposure includes APT/LSTs, stablecoins, BTC/ETH-linked assets, xLPT and other yield-bearing assets.

Base lending yield is economically organic (borrower interest); rewards, liquidity mining and Thala/xLPT distributions are subsidized or externally sourced. Exact organic share is Not verifiable as of September 5, 2026. organic_yield_pct: null. Risk profile / leverage. Lending is not inherently market-neutral: collateral, oracle, liquidation and depeg risk remain. LST looping is explicitly supported, including up to 90% LTV in eMode; xLPT adds underlying LP, Thala and staking-reward exposure.

Fixed-yield YT is explicitly a leveraged yield position. A protocol-wide leverage ratio is Not verifiable as of September 5, 2026. leverage_ratio: null. Lock-ups / withdrawals / limits. Standard lending deposits are redeemable claims, subject to available liquidity, utilization and rate limits. xLPT functionality can circuit-break and pause withdrawals/borrowing when pricing leaves defined bands. Fixed-yield PT/YT positions have expiry: PT redeems 1:1 for SY at maturity; YT becomes worthless at expiry; SY is described as redeemable for the underlying at any time.

Documented 8-hour rate limits apply by asset and chain. Exact universal withdrawal gates are Not verifiable as of September 5, 2026. Fees / revenue. DeFiLlama attributes fees to borrowing origination fees, accumulated interest and liquidation fees; revenue is protocol fees plus protocol shares of interest and liquidation fees. Lending liquidations typically carry a 10% fee/penalty.

Fixed-yield AMM fees are dynamic; documentation gives a 50% protocol-share example, not necessarily the live schedule. Latest indexed DeFiLlama snapshot: TVL $8.28m; active loans $13.17m; 30-day fees $64.1k; 30-day revenue $23.7k; average supply APY 2.84% across 19 pools. TVL / trend. DeFiLlama reports Aptos $6.93m (83.7%), Echelon Initia $1.31m (15.8%), Movement $36.95k (0.4%); 30-day TVL change −10.8%. Dune-vs-DeFiLlama reconciliation, product-level TVL, APY history, volatility and sustainability are Not verifiable as of September 5, 2026 because Dune MCP is unavailable and the indexed source does not expose a complete historical decomposition. Contradiction callout: Prior findings said chain-by-chain TVL was unavailable; the latest DeFiLlama snapshot now provides a chain split, but it is aggregator data—not on-chain verified—and omits a separate “Move” aggregate beyond the listed deployments.

Evidence (6)

reserves

unverified

As of September 5, 2026, reserves/treasury are only partly verifiable.

  • Liquid reserves (USD): Not verifiable as of 2026-09-05. Dune/on-chain verification is unavailable in this run; no treasury balance, reserve-wallet balance, or reproducible on-chain snapshot can be provided. Do not equate protocol TVL or deposits with reserves.
  • Liabilities (USD): Not verifiable as of 2026-09-05. Reported active loans are an analytics metric, not a verified liabilities balance.
  • Addresses: Echelon’s Aptos mainnet deployment address is 0xc6bc659f1649553c1a3fa05d9727433dc03843baac29473c817d06d39e7621ba; this is a protocol address, not confirmed as a treasury address. The documentation lists market addresses and reserve factors, but no separately identified treasury/reserve custody address.
  • Composition: Documentation says borrower interest is split through a reserve factor, with part directed to liquidity reserves/treasury. Reserve factors are asset-specific; examples on Aptos documentation include 25% for many assets, 60% for APT and kAPT. These are policy parameters, not balances.
  • Treasury allocation: The tokenomics page reserves 20,000,000 ELON (20% of stated 100,000,000 maximum supply) for the protocol treasury. This is an allocation claim, not proof of current treasury holdings or custody.
  • Custody/control: Echelon describes the lending protocol as non-custodial and permissionless, but publicly available sources reviewed here do not verify the controlling accounts, multisig configuration, signer threshold, withdrawal authority, or reserve-wallet segregation. Not verifiable as of 2026-09-05.
  • Attestations: Audits are listed, but no reserve attestation, proof-of-reserves report, or liabilities attestation was located. Not verifiable as of 2026-09-05. Contradiction / data-quality callout: Echelon’s website reports total deposits of $18.34m and active loans of $11.48m, while DeFiLlama reports approximately $8.28m TVL and $13.17m active loans. These likely reflect different definitions or timestamps; neither figure establishes reserves or liabilities.
Evidence (6)

tokenomics

two sources

Echelon Market appears to be a very early / niche project; available information on a native token is extremely scarce and fragmented. Most of what would normally be covered under institutional tokenomics is not verifiable as of 2026-09-03. ### Native token and contracts

  • Publicly indexed data for an “Echelon Market” token on Aptos, Initia or other Move chains is not found across major analytics (CoinGecko, CoinMarketCap, DefiLlama, Aptos explorers). Not verifiable as of 2026-09-03.
  • No clearly labeled “Echelon Market” or “ECHELON” token contracts on Aptos or Initia explorers can be matched with this protocol with high confidence. Not verifiable as of 2026-09-03. Because of this, all standard tokenomics items below (supply, unlocks, allocations, governance, etc.) cannot be reliably established. ### Supply, market cap, FDV
  • Total supply, circulating supply, market cap and FDV for any native token of Echelon Market are not listed on major market-data aggregators, nor in independently verifiable docs. Not verifiable as of 2026-09-03. ### Utility, governance, revenue share
  • There is no independent documentation (audits, governance forum, reputable analytics) describing a native token’s utility, governance rights, revenue share, buybacks, burns, staking rewards, or fee distribution for Echelon Market. Not verifiable as of 2026-09-03. ### Emissions & unlocks
  • Emissions schedule and unlock schedule (including whether any announced unlocks occurred on-chain) cannot be corroborated from explorers, analytics platforms or third‑party research. Not verifiable as of 2026-09-03. ### Allocations & insider concentration
  • No credible breakdown of team / investor / treasury / community allocations is available.
  • Without a confirmed token contract, top‑holder concentration and insider wallets cannot be analyzed. Not verifiable as of 2026-09-03. ### Control functions (mint, blacklist, fee switch)
  • In the absence of a confirmed token contract address, it is not possible to assess minting authority, blacklist features, or fee‑switch control and whether they are governed by a multisig or DAO. Not verifiable as of 2026-09-03. ### Listings and liquidity
  • Major DEXs and CEXs do not show a clearly attributable Echelon Market native token listing on Aptos, Initia, or other chains. DEX liquidity depth and main trading pairs cannot be reliably determined. Not verifiable as of 2026-09-03. Given current data, the only defensible statement is: either Echelon Market has no publicly deployed, widely tracked native token yet, or any token that may exist is not indexed by main analytics and is therefore not verifiable as of 2026-09-03.
Evidence (3)

Stress scenarios

stress scenario - bitcoin price falls below $10000

two sources

For a stress scenario where Bitcoin falls below $10,000, the key risk for Echelon Market is collateral devaluation and liquidation pressure across any BTC-linked borrowing positions. At that price level, BTC would be down roughly 85%+ from recent cycle highs in the market commentary provided, implying a severe stress environment rather than a normal drawdown. What that means for Echelon Market is operationally simple: if BTC is used as collateral, positions with high leverage or thin safety margins would be the first to move toward liquidation, and borrower deleveraging could cascade into lower liquidity and worse execution for any BTC-denominated or BTC-correlated markets.

A $10,000 BTC outcome is generally framed by the cited sources as requiring a broader macro liquidity shock, forced deleveraging, or a crypto-specific confidence crisis, not just an isolated BTC selloff. I could not verify Echelon Market’s specific collateral factors, liquidation thresholds, BTC market depth, or chain-level exposure from the provided sources. Not verifiable as of 2026-09-03. Given the available evidence, the most defensible institutional view is:

  • Primary risk: BTC collateral becomes insufficient, triggering liquidations.
  • Secondary risk: liquidations and forced sales can amplify volatility and reduce available liquidity.
  • Tertiary risk: if BTC is a meaningful reserve or quoted asset in the protocol, mark-to-market losses could impair user confidence and borrowing capacity. If you want, I can turn this into a concise risk memo format with sections for collateral, liquidation, liquidity, and protocol-specific controls.
Evidence (7)

stress scenario - largest collateral depegs 20%,

one source

Echelon Market’s documentation confirms that liquidation is triggered when a borrower’s collateral value falls below the loan’s risk threshold, and that isolated markets keep certain assets separate from the global collateral pool. For a 20% depeg of the largest collateral, the direct effect is a 20% mark-down in that collateral’s value; any position that was already near its liquidation threshold may become liquidatable, while positions with larger buffers may remain healthy. The protocol docs do not provide the per-asset collateral composition, debt distribution, or liquidation thresholds needed to quantify expected liquidations or bad debt for this exact shock, so the dollar impact is Not verifiable as of 2026-09-03.

Available analytics show Echelon Market has about $15.65M TVL and $9.02M borrowed on the protocol homepage, while a third-party analytics page attributes roughly $194.5M TVL on Aptos and $152.29M borrowed to Echelon Market; these figures conflict and are not directly reconcilable from the provided sources. Because the request is for a stress scenario, the key risk finding is qualitative: a 20% depeg in the largest collateral would raise liquidation pressure materially, but the size of any shortfall or bad debt cannot be established from the available evidence.

Evidence (6)

stress scenario - top counterparty insolvent — each with expected loss path, who absorbs it, compensation, and the impact path through the smart contracts;

unverified

For Echelon Market, the stress path for a top counterparty insolvency is: the position is first liquidated if it becomes undercollateralized; the liquidator repays part or all of the debt and receives collateral at a discount, with a fixed liquidation fee applied. If the collateral still cannot fully cover the debt, the residual bad debt is socialized among all pool lenders / liquidity providers in the affected pool, rather than absorbed by a single counterparty or by the liquidator. The compensation mechanism is therefore limited to the liquidation discount and fee for the liquidator; lenders are compensated only to the extent the liquidation recovers value before any shortfall is distributed.

The impact path runs through the protocol’s liquidation and risk-parameter contracts: price/oracle inputs determine health factor and liquidation eligibility, liquidation contracts seize collateral and repay debt, and any unrecovered shortfall is pushed into the pool’s lender-side loss-sharing / reduced value state. This is the clearest stated loss-absorption waterfall available from the protocol documentation, but on-chain verification is Not verifiable as of 2026-09-04 because on-chain tooling is unavailable in this run.

Evidence (3)

stress scenario - committed fraud by the DAO or owners

two sources

For the stress scenario of committed fraud by the DAO or owners, I could not verify any credible evidence that Echelon Market’s DAO, founders, or owners committed fraud as of 2026-09-03. The available web results include the protocol’s own marketing page and a directory listing, but they do not provide independent evidence of fraud, governance theft, or owner misconduct. What is verifiable is narrower: Echelon Market is presented as a Move-based lending market on its own site and in an Aptos ecosystem directory, but those are not independent fraud findings.

The other search results are either unrelated DAO fraud references, generic DAO-risk commentary, or low-credibility scam allegations that appear to concern a different domain/name variant and are not sufficient to establish misconduct by this protocol. Because on-chain verification is unavailable in this run and the result set does not include a credible audit, governance record, regulator action, or independent investigation tied to Echelon Market, the fraud scenario is Not verifiable as of 2026-09-03. If you want a risk judgment for underwriting, the safest phrasing is: no independent evidence of committed fraud was found, but the absence of verifiable governance and on-chain evidence leaves the scenario unresolved.

Evidence (4)

stress scenario - primary yield source negative 30d,

two sources

Echelon Market’s primary yield source is not negative on a 30-day basis in the available web results. DefiLlama shows Holders Revenue (30d) = $0 for Echelon Market, which indicates no tracked holder revenue over the last 30 days rather than a negative yield stream. The protocol’s fixed-yield design routes yield through PT/YT markets where YT accrues underlying yield and PT prices imply APY, but the search results do not provide a verified 30-day negative yield figure for the primary source.

For a stress scenario, the defensible reading is “zero or not verifiable,” not negative, based on the available evidence. Because on-chain verification is unavailable in this run, the exact primary-yield 30d sign is Not verifiable as of 2026-09-03. The related protocol description and ecosystem listing confirm Echelon is a Move-based lending/fixed-yield protocol on Aptos and Movement/Echelon Initia, but they do not establish a negative 30-day primary yield outcome.

Evidence (3)

Governance & Legal

governance

unverified

Срез на 13 сентября 2026 г. Контроль. Frontend/Platform/Services принадлежат или контролируются Echelon Labs по ToS; компания может единолично изменять, приостанавливать или прекращать доступ. Применимое право — Британские Виргинские острова. Юридическое имя, регистрационный номер и директора: Not verifiable as of September 13, 2026. Dev/contracts. Echelon Labs заявляет разработку интерфейса и сервисов; протокол описывается как non-custodial и peer-to-peer.

Однако владельцы Move-модулей, upgrade/admin capabilities и фактический контроль контрактов не подтверждены независимым on-chain анализом: Not verifiable as of September 13, 2026. Funds. ToS отрицает custody пользовательских кошельков, но контроль treasury/reserves и возможность административного перемещения средств не подтверждены: Not verifiable as of September 13, 2026. Governance/process. Документация указывает, что листинг активов первоначально контролирует core team; в будущем это должно перейти Asset Listing Governance Team под руководством держателей Echelon token. Это указывает на планируемую, а не доказанную полноценно работающую DAO-модель. Общие правила proposal creation, quorum, voting period, execution и veto не опубликованы/не подтверждены. DAO assessment. DAO выглядит символической/неполной: публичные материалы описывают будущую передачу полномочий держателям, но не доказывают, что token holders сейчас контролируют параметры и upgrades.

Голосование, концентрация и top holders через Dune: Not verifiable as of September 13, 2026 (Dune MCP недоступен в этом прогоне; on-chain данные не выдумывались). Multisig/timelock/admin. Порог и владельцы multisig, timelock, delay, emergency bypass и фактические admin powers: Not verifiable as of September 13, 2026.

Dao governance
No
Evidence (4)

legal & regulatory

one source

Echelon Market appears to be a relatively new DeFi protocol and orderbook DEX ecosystem focused on Aptos and the Echelon/Initia stack; there is limited public legal and regulatory information, and no clear corporate wrapper is disclosed in independent sources as of 2026‑09‑03. Legal entity & jurisdiction

  • Independent sources (Aptos ecosystem listings, Initia ecosystem materials, and technical docs) describe Echelon Market as a protocol/infra layer, but do not identify a specific legal entity (company or foundation) or place of incorporation.
  • Because no independently verifiable entity or registration is visible, the entity and jurisdiction must be recorded as: *"Not verifiable as of 2026‑09‑03"*. Terms of service / user restrictions
  • Publicly available docs and front‑end materials do not show a conventional, lawyer‑style Terms of Service, geographic restriction list, or age/qualification statements from independent sources.
  • Any ToS visible only in the project’s own UI or docs would be an unverified marketing claim under your framework. KYC / AML
  • Echelon is presented as a non‑custodial, permissionless orderbook and DeFi infrastructure. No independent source describes onboarding KYC, identity verification, or AML procedures for normal users.
  • This strongly suggests no KYC on the core protocol interfaces, but without direct confirmation from a regulated intermediary this remains an inference, not on‑chain fact. Regulatory classification / licensing
  • There is no evidence from securities, commodities, or payments regulators (e.g., SEC, CFTC, MAS, DFSA, etc.) describing Echelon Market as a licensed venue, broker, exchange, or similar.
  • No public VASP, EMI, or MiFID license records can be linked to Echelon Market by name, chain activity, or team identity.
  • Under your framework, the protocol should be treated as an unlicensed DeFi protocol with unknown legal wrapper. Warnings, enforcement, court cases, sanctions
  • Searches of major regulator warning lists and enforcement databases (U.S., U.K., EU, Singapore, Dubai) return no entries specifically naming Echelon Market or a clearly associated entity.
  • No court cases or formal proceedings involving Echelon Market have been identified as of 2026‑09‑03.
  • No sanctions listings (OFAC, EU, U.K.) include Echelon Market or a clearly linked entity. Data protection & privacy
  • There is no independent privacy policy or data‑protection framework (e.g., GDPR statements) attributable to a legal entity behind Echelon Market. Any privacy language found only in protocol docs/UI is an unverified marketing claim. Risk-relevant takeaway
  • From an institutional risk perspective, Echelon Market currently looks like a legally opaque, permissionless DeFi protocol with no publicly verifiable corporate wrapper, licensing, or compliance regime.
  • This increases counterparty/venue risk, complicates regulatory reporting, and may trigger internal policy limits on onboarding or exposure size until a clear entity and jurisdiction are established.
Sanctioned
No
Entity
Not verifiable as of 2026-09-03
Jurisdiction
Not verifiable as of 2026-09-03
Evidence (3)

legal registries

two sources

No exact GLEIF LEI record for 'Echelon Market'. OFAC SDN screening of 'Echelon Market': no match. SEC litigation and administrative release feeds: no mention.

Screened names
  • Echelon Market
Sanctioned
No
Evidence (4)

Stability

stability

unverified

Echelon Market does not appear to issue its own stablecoin; the protocol is a lending market that supports external assets including USDC, USDT, sUSDe, zUSDC, zUSDT, and whUSDC. No protocol-issued stablecoin was evidenced in the available sources, so depeg_count, last_depeg_date, and max_depeg_pct are not verifiable as of 2026-09-05. stablecoin_ids is an empty array because no Echelon-native stablecoin could be confirmed.

Own stablecoin
No
Evidence (3)

Risks & Strengths

risks

two sources

Echelon’s principal risks are smart-contract defects, oracle dependency, liquidation shortfalls, privileged administration, and bridge/multi-chain dependencies. Multiple audits provide meaningful coverage, but acknowledged findings, time-boxed scopes, external integrations, and socialized bad debt leave material residual risk. On-chain TVL, utilization, reserves, and chain-level exposure are Not verifiable as of September 5, 2026 because Dune MCP is unavailable.

RiskImpactSeverityProbabilityMitigation in placeResidual risk
Smart-contract defectsMove lending, reward, accounting, or integration bugs could misprice positions, block markets, or directly cause loss of lender and borrower funds. Recent audits found high and medium findings, while Quantstamp reported several acknowledged issues.HighMediumMultiple OtterSec, Quantstamp, Zellic, and Code4rena assessments; fixes and mitigations reported; public bug-bounty claim above $250,000.Audit scope and point-in-time fixes do not eliminate undiscovered bugs or risks in later deployments and features.
Oracle failure or manipulationStale, incorrect, or manipulated prices can trigger unfair liquidations, permit under-collateralized borrowing, or create bad debt, particularly for thin-liquidity and custom-priced assets.HighMediumUses Chainlink, Pyth, Switchboard, and custom feeds with fallback logic; asset-specific oracle selection and monitoring are documented.Fallback DEX/CEX pricing and custom exchange-rate calculations remain vulnerable to outages, latency, liquidity shocks, and correlated oracle failure.
Liquidation and bad debtVolatility, slippage, insufficient market liquidity, or unavailable liquidator bots may prevent timely collateral sales; uncovered losses are socialized across affected pool lenders.HighHighOver-collateralization, LTV/LT parameters, supply and borrow caps, liquidation incentives, isolated markets, and permissionless third-party liquidation bots.Black-swan gaps can still transfer losses to lenders; actual liquidation capacity and pool liquidity are Not verifiable as of September 5, 2026.
Admin and upgrade concentrationPrivileged administrators or governance can change listings, risk parameters, pauses, or upgradeable logic; errors or compromise could impair liquidations or introduce insolvency risk.HighMediumGovernance-controlled asset listing framework, parameterization, emergency controls, and documented audits of access-control logic.Audit materials identify acknowledged concerns around pausing liquidation and upgradability; administrator key structure and operational controls are Not verifiable as of September 5, 2026.
Bridge and chain dependenciesBridged collateral and deployment-specific code depend on LayerZero, Wormhole, Aptos, Initia, and Movement infrastructure; bridge exploits, messaging failures, or chain outages can impair solvency or withdrawals.HighMediumSeparate deployments, isolated markets, multiple bridge providers, and chain-specific asset parameters reduce—but do not remove—cross-system exposure.Bridge security, message integrity, chain finality, and per-chain exposure are Not verifiable as of September 5, 2026.
Evidence (6)

strengths

two sources

Top 5 strengths of Echelon Market are: 1) Capital efficiency through E-Mode / efficiency mode, which increases borrowing power on correlated assets like stablecoins and LSTs; 2) Multi-chain Move-ecosystem deployment on Aptos, Movement, and Initia, which broadens addressable liquidity and users across the Move stack; 3) Modular, isolated risk markets, which limit contagion by separating asset pools and risk parameters; 4) Broad asset support and composability, including core assets, LSTs, LP tokens, and other yield-bearing assets for looping and leveraged strategies; 5) Security and risk-management posture, backed by Move’s resource-oriented design plus multiple audits and oracle/risk controls.

Evidence (8)

Methodology & Limitations

  • On-chain metrics: not verifiable — Dune phase 2 is not enabled.
  • 0 of 25 fact categories not yet collected.
  • Fact verifiability: 12 two independent sources, 19 one source, 16 unverified.
  • Oldest fact verification date: 2026-08-28.