IoTeX (IOTX) Web3 Project Audit Report

Executive Summary

IoTeX is an established Layer-1 blockchain pivoting strongly into the Decentralized Physical Infrastructure Networks (DePIN) and Real-World AI sectors. While it boasts strong infrastructure partnerships (Google Cloud, Chainlink) and a highly circulating token supply, the project currently faces elevated technical risks following a $4.4M bridge exploit in February 2026. Furthermore, its token distribution and recent shift away from traditional roadmaps require careful investor scrutiny.

1. General Description

• What is this project? IoTeX is a decentralized Layer-1 blockchain purpose-built for fast discovery, secure settlement, and seamless transactions between machines and physical networks [1].
• What problem does it solve? It provides verifiable authentication, ownership, and trust across interactions for machines, agents, and devices, transforming data from physical networks into collective AI intelligence [1] [2].
• For what audience? The primary audience includes developers building AI and DePIN applications grounded in real-world data, as well as enterprise hardware partners [3].

2. Team

• LinkedIn: The company has a professional and active LinkedIn presence [4].
• Socials: The team is highly active on X (formerly Twitter) via their main account (@iotex_io) and developer account (@iotex_dev) [5] [6].
• Responsiveness: The team demonstrated rapid public communication and emergency response verification during the February 2026 bridge incident [7] [8].
• Known team members: The leadership is public and non-anonymous. Raullen Chai serves as the CEO and Co-founder [4] [9].

3. Concept/Documentation

• Uniqueness: IoTeX differentiates itself by focusing specifically on the intersection of blockchain, IoT, and AI (DePIN), utilizing middleware like W3bstream for verifiable off-chain computing [10] [11].
• Roadmap: In March 2026, IoTeX abandoned traditional quarterly roadmaps in favor of an "Anti-Roadmap 2026," focusing on flexible, AI-driven strategic challenges rather than fixed milestones [12] [13] [14]. Note: This reduces predictability for investors.
• Technical details: The L1 is EVM-compatible and utilizes a Roll-DPoS (Randomized Delegated Proof of Stake) consensus mechanism capable of 1,000+ TPS [15] [16].
• Partnerships: IoTeX has verified, high-profile infrastructure partnerships. Google Cloud lists IoTeX as a Web3 partner and hosts an IoTeX BigQuery dataset [17] [18]. It also integrates with Chainlink for price oracles [19].

4. Coin/Tokenomics

• Tokenomics exists: Yes, detailed in the IoTeX 2.0 whitepaper and community forums [16] [20].
• Distribution & Team Allocation: Third-party analyses indicate that the initial allocation included 15% to the team and 25% to the foundation (totaling 40% insider allocation) [21] [22]. Warning: This exceeds the ideal <10% threshold, though this data reflects historical ICO distributions and may be outdated.
• Decentralized distribution: The top 10 wallets hold approximately 78% of the supply [23]. Warning: This exceeds the 70% threshold, though it is heavily skewed by protocol contracts like the Native Staking v2 Pool (33.61%) and Binance exchange wallets (14.38%) rather than individual whales [23].
• Supply & Volume: As of early April 2026, the circulating supply is ~9.44B out of a 10B max supply (94.4% circulating), meaning unlock spikes are minimal [24]. 24-hour trading volume is roughly $1.51M [24].
• TVL: Public TVL data is highly fragmented and largely outdated (e.g., DeFiLlama showing $1.84M for Bedrock on IoTeX in late 2023) [25].

5. Code

• Open source: The core software is open-source and accessible on GitHub under the iotexproject organization [26].
• Active development: Repositories for core nodes, APIs, and DePIN tools (like W3bstream) exist and show historical activity [26] [27].
• Security audits & Bug Bounty: IoTeX maintains a bug bounty program on HackenProof with payouts up to $2,500 [28]. Following a major exploit in February 2026, the team mandated a full, independent security audit of their cross-chain infrastructure [8].

6. Risks

• Technical risks (HIGH): On February 21-23, 2026, IoTeX's ioTube cross-chain bridge suffered a $4.4M exploit due to a private key vulnerability [29] [30]. Bridge operations were suspended pending audits [8].
• Market risks (HIGH): The token is highly volatile and currently trades at ~$0.0044, down over 98% from its November 2021 all-time high of $0.26 [24].
• Financial/Centralization risks (MEDIUM): High concentration of tokens in staking pools and exchange wallets creates potential governance and liquidity bottlenecks [23].
• Roadmap risks (MEDIUM): The shift to an "Anti-Roadmap" removes standard accountability metrics for development progress [13].

7. Community

• Activity: The community is active, particularly regarding governance and staking [31] [32].
• Crisis Communication: During the February 2026 hack, the team actively used X to communicate recovery deposit addresses, claims portals, and audit statuses, showing strong community management during crises [7] [5].

8. Final Assessment

• Risk level: MEDIUM-HIGH
• Key strengths:
• Strong, relevant narrative targeting the growing DePIN and AI sectors.
• EVM compatibility combined with fast Roll-DPoS consensus lowers developer friction.
• Verified, tier-1 infrastructure partnerships (Google Cloud, Chainlink).
• Public, non-anonymous team with a highly circulating token supply (94.4%).
• Key issues and warnings:
• Recent Security Breach: The $4.4M ioTube bridge hack in February 2026 highlights severe cross-chain vulnerabilities.
• Token Concentration: Top 10 wallets hold 78% of the supply, and historical insider allocations (team + foundation) were high (40%).
• Lack of Roadmap: The 2026 "Anti-Roadmap" makes it difficult to track concrete development milestones.
• Depressed Valuation: The token remains down >98% from its ATH with relatively thin daily trading volume.

References

1. IoTeX | where AI touches life. https://iotex.io/
2. IoTeX | where AI touches life. https://iotex.io/links
3. IoTeX Documentation. https://docs.iotex.io/
4. IoTeX. https://www.linkedin.com/company/iotex
5. IoTeX (@iotex_io) on X. https://x.com/iotex_io/status/2026872054331617425
6. IoTeX Developers (@iotex_dev) / Posts / X. https://x.com/iotex_dev
7. IoTeX. https://x.com/iotex_io/status/2027142250942398536
8. IoTeX (@iotex_io) on X. https://x.com/iotex_io/status/2025824807120412842
9. IoTeX CEO Raullen Chai: Smart Cities Require 'Individuals .... https://www.linkedin.com/posts/ccndotcom_iotex-ceo-raullen-chai-smart-cities-require-activity-7245076548649689088-w4T2
10. IoTeX RPC Endpoints. https://www.dwellir.com/networks/iotex
11. W3bstream - Build Decentralized Physical Networks Fast. https://w3bstream.com/
12. IoTeX Abandons Traditional Roadmap for AI-Driven Strategy. https://www.linkedin.com/posts/iotex_we-stopped-writing-roadmaps-every-year-activity-7437609149141598208-7vQx
13. IoTeX Drops Traditional Roadmaps With Anti-Roadmap 2026. https://ourcryptotalk.com/news/iotex-drops-traditional-roadmaps-with-anti-roadmap-2026
14. IoTeX 2026 Anti-Roadmap Has Arrived! 🛠️. https://www.reddit.com/r/IoTeX/comments/1rq6bsr/iotex_2026_antiroadmap_has_arrived/
15. IoTeX L1 Blockchain. https://docs.iotex.io/blockchain
16. IoTeX 2.0 – DePIN for Everyone!. https://cdn.iotex.io/whitepaper/iotex-2.0-whitepaper.pdf
17. Web3 | Google Cloud. https://cloud.google.com/web3
18. Discover Web3 products on Google Cloud. https://cloud.google.com/application/web3/discover
19. Chainlink Relayer | IoTeX L1 Blokchain. https://docs.iotex.io/blockchain/build/defi/price-oracles/chainlink-relayer
20. [Passed! ✅] Burn-Drop Tokenomics Updates. https://community.iotex.io/t/passed-burn-drop-tokenomics-updates/9127
21. IoTeX Review | Own Your Mind. https://ownyourmind.ai/projects/iotex/
22. What Is IoTeX? All You Need to Know About IOTX. https://www.gate.com/learn/articles/what-is-iotex/838
23. Token Tracker | IoTeXScan. https://iotexscan.io/accounts
24. IoTeX price today, IOTX to USD live .... https://coinmarketcap.com/currencies/iotex/
25. Bedrock TVL Stats & Charts. https://defillama.com/protocol/bedrock
26. IoTeX Network. https://github.com/iotexproject
27. iotexproject/iotex-analyser-api. https://github.com/iotexproject/iotex-analyser-api
28. IoTeX: Program Info. https://hackenproof.com/programs/iotex
29. IoTeX Bridge Hack: $4.4M Exploit, 10% Bounty Offer & .... https://phemex.com/blogs/iotex-bridge-hack-cross-chain-risk-negotiations
30. Explained: The IoTeX Hack (February 2026). https://www.halborn.com/blog/post/explained-the-iotex-hack-february-2026
31. IoTeX Staking Guide | IoTeX L1 Blokchain. https://docs.iotex.io/blockchain/learn-iotex/staking-and-governance/iotex-staking-guide
32. IoTeX Monthly Update (July 2025). https://www.linkedin.com/pulse/iotex-monthly-update-july-2025-iotex-ud8he