Is Hashnote Safe?
Risk Grade: C+ (38/100)
Hashnote is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
Moderate risk — backed by the safest asset in the world (US Treasuries) but the custody chain and regulatory status add meaningful risk layers
A tokenized US Treasury fund (USYC) that lets you earn government bond yields on-chain. It manages $500M and is the primary backing for Usual's USD0 stablecoin ($700M). Its C grade reflects the concentrated counterparty risk where Hashnote's failure would cascade through USD0 into broader DeFi.
TVL
$2.8B
Mechanisms
5
Interactions
6
Value Grade
B+
Key Risks for Hashnote Users
Usual's $700M stablecoin depends almost entirely on Hashnote's USYC. If Hashnote has an operational failure, USD0 breaks its dollar peg and triggers liquidations across every DeFi protocol that accepts it
Redeeming for actual dollars takes at least one business day because Treasuries settle on T+1. During a panic, you wait in line while the token price drops on secondary markets
If regulators decide USYC is an unregistered security, they can freeze the tokens and seize the underlying Treasuries. Your money could be locked indefinitely during legal proceedings
Top Risk Factors
- •USYC is now a Circle product following the acquisition (completed 2025), materially improving regulatory standing and institutional credibility, but Circle's compliance-heavy model means potential regulatory constraints on USYC usage in certain jurisdictions.
- •Institutional-only access (KYC/AML required for direct redemption) limits retail adoption and creates secondary market liquidity risk during stress events when institutional redemptions dominate.
- •Smart contract risk from yield distribution and redemption mechanics; USYC's on-chain integration with DeFi protocols (e.g., Hyperliquid, exchange collateral) creates novel attack surfaces not present in traditional T-bill funds.
How Hashnote Compares to Peers
Hashnote ranks #39 of 73 RWA protocols (below-median — riskier than average). At a risk score of 38/100, it's in line with the sector average (38/100).
Adjacent peers: OpenTrade (C+, 37/100) is ranked just safer, and Estate Protocol (C+, 38/100) is ranked just riskier.
Hashnote holds 9% of TVL across all rated RWA protocols ($2.8B of $33.1B total).
See the full RWA sector leaderboard or the Hashnote vs Estate Protocol comparison.
Common Questions about Hashnote
Plain-English answers based on Hashnote's scores across Hindenrank's 8 risk dimensions. The highest-scoring (riskiest) dimension is Scale Exposure (7/10).
Has Hashnote ever been hacked or exploited?
Hashnote has a fairly clean operational history. The track record dimension scored 3/15, indicating minor or no significant incidents on record. A clean track record is a positive signal but it does not guarantee future safety, especially as protocol complexity grows.
How much money is at stake in Hashnote?
Hashnote currently holds over $2.8B in user deposits. A protocol of this size typically has deeper liquidity, more eyes on the code, and more attention from auditors — but it also means a single failure has a much larger blast radius.
What's the worst-case scenario for Hashnote?
Hindenrank has identified specific collapse scenarios for Hashnote. The most prominent: "Treasury Depeg Cascades Through DeFi via Usual USD0". The trigger condition is Hashnote's USYC loses peg due to US Treasury default, regulatory action, or operational failure, triggering cascade through Usual's USD0 and broader DeFi collateral chains. Reading through the full scenario list on the protocol page is the single best way to understand the actual failure modes — generic "smart contract risk" is rarely the thing that takes a protocol down.
Is Hashnote regulated or insured?
Hashnote has some regulatory exposure (5/10), typical of mid-sized DeFi protocols. There is no specific enforcement action on record, but the structure includes elements that regulators have flagged in similar protocols. No DeFi protocol carries FDIC-style insurance — even with low regulatory risk, depositors are not protected in the way bank customers are.
What are the biggest red flags for Hashnote?
Hindenrank's retail-focused risk audit flagged: Usual's $700M stablecoin depends almost entirely on Hashnote's USYC. If Hashnote has an operational failure, USD0 breaks its dollar peg and triggers liquidations across every DeFi protocol that accepts it Redeeming for actual dollars takes at least one business day because Treasuries settle on T+1. During a panic, you wait in line while the token price drops on secondary markets If regulators decide USYC is an unregistered security, they can freeze the tokens and seize the underlying Treasuries. Your money could be locked indefinitely during legal proceedings
Should beginners deposit into Hashnote?
Hashnote's C+ grade puts it in the elevated-risk band. This is not a beginner-friendly protocol. Anyone depositing here should treat the position as speculative and avoid concentrating significant savings in it.
How does Hashnote compare to safer RWA alternatives?
Hashnote is one protocol in Hindenrank's RWA coverage. The safest RWA protocols on the leaderboard tend to share three traits: a long incident-free track record, conservative mechanism design, and high-quality public documentation. Compare Hashnote against the full RWA ranking before committing capital.
For the full 8-dimension score breakdown, the radar chart, and dependency graph, see the Hashnote risk report.
Read the Full Hashnote Risk Report
This protocol has 2 collapse scenarios. 2 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.