How Does IOTA Work?
IOTA is a distributed ledger originally designed for IoT micropayments using a novel DAG-based Tangle structure. After years of development challenges including critical security incidents (2017 Curl vulnerability, 2020 Trinity wallet hack requiring network shutdown), it underwent a radical transformation with the Rebased upgrade in May 2025, switching to Mysticeti DPoS consensus with Move smart contracts. Despite nearly a decade of development, its DeFi TVL remains minimal at approximately $10M. Its C+ grade reflects the significant security history, unproven new architecture, and limited ecosystem adoption, partially offset by the removal of the centralized Coordinator and active Foundation development.
TVL
$10M
Sector
L1
Risk Grade
B-
Value Grade
D-
Core Mechanisms
Consensus/BFT
NovelMysticeti consensus — a DAG-based BFT consensus protocol adopted from Sui's Mysticeti implementation, achieving sub-second finality with up to 100 elected validators under the IOTA Rebased architecture. Replaced the original Tangle + Coordinator model
While Mysticeti itself is proven on Sui, IOTA's adoption and integration of it into a fundamentally different network architecture (replacing a DAG-based feeless model) is a novel transition. The implementation has less than 1 year of production history on IOTA specifically.
Staking/Delegated-PoS
IOTA DPoS — delegated proof-of-stake where token holders delegate IOTA to up to 100 elected validators. 43% of circulating supply is staked earning approximately 14.64% APY. No slashing in the current implementation
Standard DPoS model. The high APY (14.64%) relative to ecosystem revenue suggests heavy reliance on inflationary rewards rather than organic fee capture.
Smart-Contract/VM
NovelMoveVM smart contracts — IOTA Rebased introduced Move language smart contracts at the base layer, enabling DeFi and dApp development. Additionally, IOTA EVM provides an EVM-compatible L2 for Solidity developers
The combination of Move at L1 with EVM at L2 is architecturally unique among Move-based chains. However, both Move (from Aptos/Sui) and EVM are individually well-established.
Network/DAG-Tangle
Tangle (legacy) — IOTA's original directed acyclic graph structure where each transaction confirms two previous transactions, enabling feeless transactions. Now superseded by Mysticeti consensus in Rebased but the DAG structure remains for data ordering
The original Tangle was novel when introduced but has been largely replaced by Mysticeti consensus in the Rebased upgrade. The DAG data structure remains but is no longer the primary consensus mechanism.
Token-Supply/Fixed-Supply
IOTA token supply — approximately 4.8 billion total supply with no mining or ongoing emission. Staking rewards come from a combination of network fees and protocol-managed incentive pools
Fixed supply model. The 14.64% staking APY at current usage levels suggests the rewards are likely funded through treasury/inflation mechanisms rather than organic fee revenue.
Token-Supply/Fee-Burn
IOTA fee burn — a built-in fee-burning mechanism introduces deflationary pressure, counterbalancing staking reward emissions
Standard fee burn mechanism. At current low transaction volumes, the burn rate is minimal.
How the Pieces Interact
New consensus under-tested — the Mysticeti consensus was adopted from Sui and launched on IOTA mainnet in May 2025, giving it less than 1 year of production history on this specific network. Any bugs in the IOTA-specific implementation or edge cases from the architectural transition could cause consensus failures or validator issues
Dual execution environment complexity — running MoveVM at L1 and EVM at L2 creates cross-layer interaction risks. Smart contract exploits on either layer could require network-level intervention, echoing the Trinity wallet attack pattern where the IOTA Foundation had to shut down the Coordinator to contain damage
Unsustainable staking rewards — at 14.64% APY with $10M TVL and minimal fee revenue, staking rewards appear to be funded primarily through token inflation or treasury distribution rather than organic network activity, creating long-term sustainability concerns
Legacy architecture migration risks — the transition from the Tangle model to Mysticeti DPoS may leave edge cases in data handling, state migration, or backward compatibility that could create unexpected issues for applications built on the original architecture
Fee-staking economics mismatch — the fee burn mechanism reduces circulating supply while high staking rewards add to effective supply; at low usage volumes, the net effect is inflationary, diluting non-staking holders
What Could Go Wrong
- Extensive history of security incidents — IOTA has experienced the Curl hash function vulnerability (2017), Trinity wallet attack ($2M stolen, 2020, required network shutdown via Coordinator), and replay attack vulnerabilities, demonstrating a pattern of critical security issues in earlier iterations
- Radical architectural pivot — IOTA Rebased (May 2025) abandoned the original Tangle/Coordinator architecture entirely, switching to Move-based DPoS with Mysticeti consensus. While addressing centralization, this is effectively a new chain with less than 1 year of production history in its current form
- Minimal DeFi ecosystem — combined TVL of approximately $10M across IOTA and IOTA EVM chains after nearly a decade of development, indicating limited developer and user adoption despite repeated architectural reinventions
- The IOTA Foundation's pivot from crypto ecosystem to global trade infrastructure ($35T market) represents a strategic departure from the DeFi and L1 competition, creating uncertainty about the network's positioning and developer focus
Rebased architecture failure echoes historic IOTA security incidents
ModerateTrigger: A critical vulnerability is discovered in IOTA's specific implementation of Mysticeti consensus or MoveVM integration within the first 2 years of the Rebased deployment, requiring emergency intervention similar to the 2020 Coordinator shutdown
- 1.A security researcher or attacker discovers a vulnerability in IOTA's Mysticeti implementation or the Move smart contract layer that allows fund theft or consensus manipulation, similar to the 2017 Curl vulnerability or 2020 Trinity wallet exploit — IOTA Foundation must choose between halting the network (as it did in 2020) or allowing ongoing exploitation; either outcome damages confidence in the Rebased architecture
- 2.If the network is halted, the 43% of supply currently staked becomes frozen, and DeFi positions across the $10M TVL ecosystem are locked, preventing users from managing risk — The third major security incident in IOTA's history (after Curl and Trinity) confirms a pattern of implementation vulnerabilities, causing a crisis of confidence in the Foundation's engineering capabilities
- 3.The global trade infrastructure narrative collapses as institutional partners (trade finance, government projects) reconsider relying on a network with repeated security incidents — IOTA token price declines significantly as both the DeFi and enterprise narratives are undermined; ecosystem development stalls as the Foundation focuses on remediation
Risk Profile at a Glance
Overall: B- (35/100)
Lower score = safer