Is Hashnote Safe?
Risk Grade: C+ (39/100)
Hashnote is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
Moderate risk -- backed by the safest asset in the world (US Treasuries) and operated by Circle (publicly listed), but heavy Binance/Ceffu custody concentration and regulatory status add meaningful risk layers
A tokenized US Treasury fund (USYC) operated by Circle (NYSE:CRCL) that lets you earn government bond yields on-chain. It manages $2.83B in assets as the #1 tokenized Treasury fund globally, with ~65% of TVL held as Binance institutional collateral on BNB Chain. Its C grade reflects concentrated counterparty risk at both the Binance/Ceffu custody level and downstream in protocols that use USYC-backed stablecoins.
TVL
$3.0B
Mechanisms
5
Interactions
7
Value Grade
B+
Key Risks for Hashnote Users
About 65% of USYC's assets (~$1.84B) are held on BNB Chain as Binance institutional collateral via Ceffu. If Binance reduces this exposure, the resulting redemption wave would exceed normal T+1 settlement capacity and temporarily depeg USYC on secondary markets
Redeeming for actual dollars takes at least one business day because Treasuries settle on T+1. During a panic, you wait in line while the token price drops on secondary markets
If regulators decide USYC is an unregistered security, they can freeze the tokens and seize the underlying Treasuries. Your money could be locked indefinitely during legal proceedings
Top Risk Factors
- •USYC is now a Circle product (acquired Jan 2025, Circle NYSE:CRCL since June 2025), improving regulatory standing, but ~65% of USYC TVL (~$1.84B) is concentrated on BNB Chain as Binance institutional collateral via Ceffu custody — a new single-counterparty concentration risk.
- •Institutional-only access (KYC/AML required for direct redemption) limits retail adoption and creates secondary market liquidity risk during stress events when institutional redemptions dominate.
- •Smart contract risk from yield distribution and redemption mechanics; USYC's multi-chain footprint (Ethereum, BNB Chain, Sui, Noble, Near) expands the attack surface, and downstream DeFi protocols using USD0 and other USYC-backed products remain exposed to cascading liquidations.
How Hashnote Compares to Peers
Hashnote ranks #46 of 77 RWA protocols (below-median — riskier than average). At a risk score of 39/100, it's in line with the sector average (38/100).
Adjacent peers: OpenTrade (C+, 38/100) is ranked just safer, and Ondo Finance (C+, 39/100) is ranked just riskier.
Hashnote holds 8% of TVL across all rated RWA protocols ($3.0B of $37.0B total).
See the full RWA sector leaderboard or the Hashnote vs Ondo Finance comparison.
Common Questions about Hashnote
Plain-English answers based on Hashnote's scores across Hindenrank's 8 risk dimensions. The highest-scoring (riskiest) dimension is Scale Exposure (7/10).
Has Hashnote ever been hacked or exploited?
Hashnote has a fairly clean operational history. The track record dimension scored 3/15, indicating minor or no significant incidents on record. A clean track record is a positive signal but it does not guarantee future safety, especially as protocol complexity grows.
How much money is at stake in Hashnote?
Hashnote currently holds over $3.0B in user deposits. A protocol of this size typically has deeper liquidity, more eyes on the code, and more attention from auditors — but it also means a single failure has a much larger blast radius.
What's the worst-case scenario for Hashnote?
Hindenrank has identified specific collapse scenarios for Hashnote. The most prominent: "Treasury Depeg Cascades Through DeFi via Usual USD0". The trigger condition is Hashnote's USYC loses peg due to US Treasury default, regulatory action, or operational failure, triggering cascade through Usual's USD0 and broader DeFi collateral chains. Reading through the full scenario list on the protocol page is the single best way to understand the actual failure modes — generic "smart contract risk" is rarely the thing that takes a protocol down.
Is Hashnote regulated or insured?
Hashnote has some regulatory exposure (5/10), typical of mid-sized DeFi protocols. There is no specific enforcement action on record, but the structure includes elements that regulators have flagged in similar protocols. No DeFi protocol carries FDIC-style insurance — even with low regulatory risk, depositors are not protected in the way bank customers are.
What are the biggest red flags for Hashnote?
Hindenrank's retail-focused risk audit flagged: About 65% of USYC's assets (~$1.84B) are held on BNB Chain as Binance institutional collateral via Ceffu. If Binance reduces this exposure, the resulting redemption wave would exceed normal T+1 settlement capacity and temporarily depeg USYC on secondary markets Redeeming for actual dollars takes at least one business day because Treasuries settle on T+1. During a panic, you wait in line while the token price drops on secondary markets If regulators decide USYC is an unregistered security, they can freeze the tokens and seize the underlying Treasuries. Your money could be locked indefinitely during legal proceedings
Should beginners deposit into Hashnote?
Hashnote's C+ grade puts it in the elevated-risk band. This is not a beginner-friendly protocol. Anyone depositing here should treat the position as speculative and avoid concentrating significant savings in it.
How does Hashnote compare to safer RWA alternatives?
Hashnote is one protocol in Hindenrank's RWA coverage. The safest RWA protocols on the leaderboard tend to share three traits: a long incident-free track record, conservative mechanism design, and high-quality public documentation. Compare Hashnote against the full RWA ranking before committing capital.
For the full 8-dimension score breakdown, the radar chart, and dependency graph, see the Hashnote risk report.
Read the Full Hashnote Risk Report
This protocol has 3 collapse scenarios. 3 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.