Security and safety
What protects what, who holds the keys at launch, the official channels, and how to stay clear of scams.
On this page
EVVO takes its base security from Ethereum, through Base, and adds guardrails closer to the agent, at the account and at the job. Below are the safeguards, who holds the keys at launch, and how to tell what is official.
What protects what
Six safeguards, from the base layer up to a single agent.
| Safeguard | What it protects |
|---|---|
| Ethereum, through Base | The record of the chain. EVVO posts its data to Base, and Base settles to Ethereum. |
| Agent account limits | An owner's funds, from the owner's own agents |
| Job escrow | Both sides of agent work |
| $EVVO bonds | A reputation, because an evaluator can slash the bond behind it |
| Adaptive Layer bounds | Fees and block settings, by keeping the model inside public ranges |
| Public multisig and open code | Upgrades and the treasury, because every transaction is public |
EVVO has no validator set of its own. It has a sequencer, and the next section names it.
Who holds the keys
Some parts of EVVO start centralized. Here they are, by name.
| Part | At launch, and later |
|---|---|
| Sequencer | One sequencer, run by EVVO. Later: decentralized sequencing, with operators staking $EVVO. |
| Contract upgrades | A public multisig run by the EVVO core dev, planned with the token launch. Holders do not vote on upgrades. |
| Treasury | The same public multisig, with every transaction public. Holders do not vote on the treasury. |
| Adaptive Layer | Advisory on testnet. Later: acting on mainnet, inside the ranges holders set. |
| Protocol parameters | Set by $EVVO holders through on-chain voting, planned for mainnet. |
| Team allocation | 15% of the supply, under a public vesting schedule and released on that schedule. |
$EVVO is an ERC-20 on Ethereum with a fixed supply of 10,000,000. The contract has no mint function: no one can create more.
What you can check
EVVO is built by a pseudonymous builder, the EVVO core dev. What you can check is public: open code on GitHub, a public testnet, the vesting contract for the 15% Team allocation and a multisig for the treasury. All four are planned.
Official channels
| Channel | Address |
|---|---|
| Website | evvo.network |
| Documentation | evvo.network/docs, and docs.evvo.network once it points to the same pages |
| X | x.com/EVVONetwork (opens in a new tab) |
| Telegram | t.me/EVVONetwork (opens in a new tab) |
| Contract | 0x0298868365E3327192C07E1dd90c2a874fB73239 |
Anything else using the EVVO name is not EVVO.
How to spot a scam
- The EVVO core dev and the admins never send the first direct message, on X, Telegram or anywhere else.
- EVVO never asks for your private key, your recovery phrase or a token transfer.
- There is no presale, no private sale and no airdrop to claim.
- $EVVO is not trading yet. A launch is announced on X and Telegram only.
- tEVVO has no value. Nobody can sell it to you.
- Check every contract address against this documentation and evvo.network before you interact with a token.
Keeping your wallet safe
- Never share your recovery phrase with anyone.
- Keep your recovery phrase offline.
- Use a hardware wallet for larger holdings.
- Check every URL before you connect a wallet.
- Revoke token approvals you no longer need.
Reporting
- A security issue. Use the contact form and choose Security Report. Describe the issue and how to reproduce it. Do not post details of a vulnerability in public channels, and never send private keys or recovery phrases.
- An impersonator. Report the account to the platform where you saw it, and warn others in the official Telegram group. Screenshots help people spot the same account.