Skip to main content
CoinPulse
Venus
Lending protocol· founded 2020

Venus Protocol: How BNB Chain's Lending Market Works

Venus Protocol is a decentralized lending market where users supply crypto to earn interest and borrow against it. It launched on BNB Chain in 2020 1. Its design merges Compound-style money markets with a Maker-style stablecoin called VAI 111. XVS token holders govern it through on-chain proposals 10. The main product, the Core Pool, held about $1.23 billion across eight networks according to DefiLlama on October 23, 2026 14. Venus has a long incident record, including oracle-manipulation losses in 2021, 2022, 2025 and March 2026 15.

Facts checked 18 cited sources No score on this page, no affiliate links

At a glance

Type
Non-custodial lending and borrowing protocol
Launched
2020, BNB Chain 1
Main product
Core Pool (Isolated Pools deprecated) 13
Networks (Core Pool)
BNB Chain, Ethereum, Arbitrum, zkSync Era, Base, Unichain, Optimism, opBNB 14
Value locked
About $1.23 billion (DefiLlama, October 23, 2026) 14
Governance token
XVS; proposals via VIPs with 1–48 hour timelocks 10
Stablecoin
VAI, minted against Venus collateral 11
Oracles
Resilient Oracle (Chainlink, RedStone, Binance and others, per asset) 6
Revenue split
40% Treasury, 40% Venus Prime, 20% Risk Fund (reserve income, eligible deployments) 9
Legal entity
Not disclosed in documentation
Official sites
venus.io; app.venus.io; docs-v4.venus.io
Last checked
October 23, 2026

Who runs Venus

Venus describes itself as a community-governed protocol and does not name a company or headquarters in its documentation. Changes go through Venus Improvement Proposals (VIPs). Voting power comes from XVS locked in the XVS Vault. Successful proposals are queued in a timelock and can then be executed by anyone 10.

There are three routes. Normal proposals wait 48 hours after passing, Fast-track 6 hours and Critical 1 hour. Submitting any proposal requires 1,000,000 XVS of delegated voting power, and passing requires 1,500,000 votes in favor 10. These are on-chain settings that governance can change. The short Critical route lets Venus react quickly to attacks, as it did in September 2025 18. It also means parameters can change with little notice.

How lending and borrowing work

Supplying. You connect a wallet to app.venus.io, enable an asset and supply it. You receive vTokens, which represent your deposit plus accrued interest. You can redeem them as long as the market has liquidity 23. Each market has a supply cap set by governance 3.

Borrowing. Supplied assets marked as collateral give you borrowing power. The collateral factor sets how much you can borrow against each asset. If your debt rises above the liquidation threshold, liquidators can repay part of it and seize collateral at a discount, the liquidation incentive 4. The Core Pool now sets thresholds and incentives per market rather than globally 4.

E-Mode. On the BNB Chain Core Pool only, users can opt into groups of correlated assets, such as stablecoins or ETH variants. Inside a group, borrowing limits are higher and the liquidation penalty lower 5.

VAI. Users can also mint Venus' own stablecoin, VAI, against their collateral. Repayments carry a stability fee. That fee rises when VAI trades below $1, which encourages repayment and supports the peg 11.

Costs. Using Venus requires network gas 2. Borrowers pay variable interest set by each market's rate model. A share of that interest goes to protocol reserves rather than to suppliers. Rates and reserve factors differ by market and change with governance votes, so check the market page before borrowing.

XVS, Venus Prime and where revenue goes

Interest reserves are routed through a ProtocolShareReserve contract. On eligible deployments, reserve income is split 40% to the Treasury, 40% to Venus Prime and 20% to the Risk Fund. Liquidation and other revenue is split 60/20/20 9. The split changed on July 1, 2026 (VIP-638). XVS Vault stakers on BNB Chain no longer receive a direct revenue share. That portion now funds Venus Prime 9. Since May 2026, revenue reaches each destination through buyback contracts run by an off-chain operator 9.

Venus Prime is a non-transferable token given to qualifying XVS stakers. Eligibility is ordered by a time-weighted score, and supply is capped at 500 tokens by default 12. Holders receive boosted rewards in the USDT, USDC, BTC, ETH and BNB markets, funded from protocol revenue 12.

The Risk Fund can cover shortfalls, but the docs state plainly that it is "not a per-user insurance policy" and does not guarantee repayment of every loss 8.

Security model and oracles

Venus prices collateral through a Resilient Oracle. For each asset, governance can assign a main, a pivot and a fallback source, drawn from Chainlink, RedStone, Binance, Atlas, APRO and others 6. The docs caution that not every asset has more than one source configured 6.

Protection Mode adds a second defense for whitelisted low-liquidity tokens. If a price jumps suspiciously, borrowing power is calculated using the recent low for collateral and the recent high for debt. Liquidations keep using the live price 7. This responds directly to the manipulation attacks described below.

Deprecated Isolated Pools

Venus has fully deprecated its standalone Isolated Pools on BNB Chain, Ethereum and Arbitrum, and removed them from the app 13. Remaining positions can sometimes be closed by calling the contracts through a block explorer. Some markets have repay or redeem paused 13. The docs warn users to verify contract addresses and never share keys with anyone claiming to be support 13.

Risks to understand

  • Oracle and collateral listing risk. Most Venus losses came from manipulated or stale prices on thin collateral 151617.
  • Liquidation. Falling collateral prices can trigger liquidation at a discount 4.
  • Governance speed. Critical changes can take effect one hour after a vote 10.
  • Bad debt. Unrecovered shortfalls are absorbed by protocol funds, not insured per user 8.
  • User-side attacks. The September 2025 loss came from a phished user, not a contract bug 18. See crypto phishing.

Incident record

6 outcome unclear

May 18, 2021

XVS price manipulationoutcome unclear
A sharp XVS price spike allowed large borrows against XVS collateral, followed by mass liquidations. DefiLlama records $100 million 15, and Rekt cites about $95 million of bad debt 17.
Outcome
Outcome not verified in this run (bad-debt repayment not confirmed from a primary source).
Source: defillama.com

May 12, 2022

LUNA stale oracleoutcome unclear
During the Terra collapse, a stalled Chainlink LUNA feed let borrowers post LUNA at an inflated price. DefiLlama records $11.2 million 15, and Rekt $14.2 million 17.
Outcome
Outcome not verified in this run.
Source: defillama.com

December 11, 2023

oracle misconfigurationoutcome unclear
DefiLlama records a $274,000 loss 15.
Outcome
Outcome not verified in this run.
Source: defillama.com

February–March 2025

zkSync wUSDM donation attackoutcome unclear
An attacker inflated the wUSDM exchange rate by donating tokens directly to the vault. Rekt reports $902,159 in bad debt, offset by $163,757 in liquidation fees. That left a net $716,789 loss absorbed by the protocol, and the market was frozen 17. DefiLlama dates the entry March 29, 2025 15.
Outcome
Contained (market frozen; loss absorbed by protocol).
Source: rekt.news

September 2, 2025

phished user, funds recoveredoutcome unclear
A user was tricked through a malicious Zoom client into granting control of their account. Venus paused the protocol, and an emergency governance vote force-liquidated the attacker's position. About $13.5 million was recovered within roughly 12 hours. The contracts and front end were not compromised 18.
Outcome
Recovered.
Source: cointelegraph.com

March 15, 2026

THE token manipulationoutcome unclear
An attacker pushed up the price of Thena's THE token, listed as Core Pool collateral. They donated THE directly to the market contract, which got around its supply cap, then borrowed other assets. About $5.07 million was borrowed and about $2.15 million of bad debt remained. Venus paused THE borrowing and withdrawals 16. Rekt reports that Venus' post-mortem said the protocol would cover the bad debt, pending a governance vote 17.
Outcome
Contained; bad-debt coverage pending confirmation in a VIP.
Source: theblock.co

Hacks in DefiLlama’s public database are also scored as the security record on the Venus rating page.

Questions about Venus

Is Venus Protocol only on BNB Chain?
No. BNB Chain is its home, but DefiLlama tracks the Core Pool on eight networks, including Ethereum, Arbitrum and Base 14.
What is XVS used for?
XVS is locked in the XVS Vault for governance voting power and counts toward Venus Prime eligibility 1012.
Does Venus insure deposits?
No. The Risk Fund can cover protocol shortfalls but is not per-user insurance 8.
What happened to Venus Isolated Pools?
They were deprecated and removed from the app. Some positions can still be closed through block explorers 13.
Was Venus hacked in 2026?
Yes. A March 15, 2026 manipulation of the THE market left about $2.15 million of bad debt 16.

For CoinPulse's separate assessment, see CoinPulse's Venus Core Pool rating and evidence and the lending ratings. For comparable designs, see our Compound and Aave profiles.

Venus elsewhere on CoinPulse

Sources

  1. 1Venus Docs — Overview.docs-v4.venus.io
  2. 2Venus Docs — FAQ.docs-v4.venus.io
  3. 3Venus Docs — Supplying and borrowing.docs-v4.venus.io
  4. 4Venus Docs — Liquidations.docs-v4.venus.io
  5. 5Venus Docs — E-Mode.docs-v4.venus.io
  6. 6Venus Docs — Resilient Price Oracle.docs-v4.venus.io
  7. 7Venus Docs — Protection Mode.docs-v4.venus.io
  8. 8Venus Docs — Risk Fund and Shortfall Handling.docs-v4.venus.io
  9. 9Venus Docs — Tokenomics; Automatic Income Allocation. ;docs-v4.venus.io
  10. 10Venus Docs — VIPs.docs-v4.venus.io
  11. 11Venus Docs — VAI.docs-v4.venus.io
  12. 12Venus Docs — Venus Prime.docs-v4.venus.io
  13. 13Venus Docs — Withdrawing from deprecated isolated pools.docs-v4.venus.io
  14. 14DefiLlama — Venus Core Pool, Venus Flux, Venus Isolated Pools. (API accessed 2026-10-23)defillama.com
  15. 15DefiLlama — Hacks database. (API accessed 2026-10-23)defillama.com
  16. 16The Block — "Venus Protocol left with roughly $2M in bad debt after exploit manipulates Thena's THE token price" (2026-03-15).theblock.co
  17. 17Rekt — "Venus Protocol - Rekt IV" (2026-03-18).rekt.news
  18. 18Cointelegraph — "Venus Protocol recovers $13.5M stolen in phishing attack" (2025-09-04).cointelegraph.com

Other lending protocolsAll →

What changed on this page

  • 2026-10-23Profile created.
All companies