Is BOB (Build on Bitcoin) Safe?
Risk Grade: C (46/100)
BOB (Build on Bitcoin) is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
BOB successfully fills the Bitcoin-in-DeFi niche with growing TVL, but the federated BTC bridge is a meaningful centralization risk until BitVM migration completes. Suitable for BTC holders seeking DeFi yield who accept federation trust assumptions.
BOB (Build on Bitcoin) is a hybrid Layer 2 that bridges Bitcoin and Ethereum ecosystems — it's an Optimism Stack rollup where Bitcoin holders can use their BTC in EVM-compatible DeFi without moving to a separate network. Backed by $23M in funding, BOB offers Bitcoin-native wallets that interact directly with EVM applications. The current BTC bridge uses a federated multisig model (similar to tBTC or WBTC), with a planned upgrade to BitVM-based trust-minimized bridging. BOB has grown to $180M TVL, primarily from BTC liquidity seeking DeFi yield.
TVL
$180M
Mechanisms
6
Interactions
5
Value Grade
C
Key Risks for BOB (Build on Bitcoin) Users
Current BTC bridge relies on a federated multisig — key compromise could drain all locked Bitcoin
7-day Ethereum withdrawal period for assets moving back to Ethereum
BitVM bridge upgrade introduces a transition risk window with potential vulnerabilities
Dual Bitcoin-Ethereum dependency means both networks' security issues affect BOB
Top Risk Factors
- •Hybrid Bitcoin-EVM bridge creates dual attack surface across both Bitcoin and Ethereum ecosystems
- •Novel Bitcoin L2 architecture with untested security assumptions under adversarial conditions
- •Optimism Stack bridge carries standard 7-day withdrawal delay with centralized sequencer risk
- •BitVM-based trust-minimized bridge still in development — current bridge relies on multisig federation
Risk Score Breakdown
BOB (Build on Bitcoin)'s highest risk area is Interaction Severity (13/20). Here's how each dimension contributes to the overall 46/100 score:
Read the Full BOB (Build on Bitcoin) Risk Report
This protocol has 2 collapse scenarios. 2 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Considering an investment?