Is Paxos Labs Safe?
Risk Grade: C+ (41/100)
Paxos Labs is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
Limited Data Available
This protocol has limited public documentation. Our analysis may not fully capture all risk dimensions.
Elevated risk — unverified bridge security and very early stage protocol with limited TVL, offset by strong MAS-regulated Paxos backing, KPMG attestations, and experienced team.
Paxos Labs is a DeFi infrastructure spin-off from Paxos Trust Company, offering the Amplify Stack: white-label stablecoin issuance (Mint), embedded yield (Earn), and DeFi lending (Borrow). Its flagship products include USDG0 — USDG bridged via LayerZero OFT to chains including Hyperliquid — and USAD, a zero-knowledge privacy stablecoin on Aleo. The protocol scored C+ reflecting the very early stage (launched 2025, limited TVL), absence of public smart contract audit reports for the bridge, and centralized control, offset by the strong regulated backing from Paxos Digital Singapore and monthly KPMG reserve attestations for USDG.
TVL
—
Mechanisms
6
Interactions
4
Value Grade
B
Key Risks for Paxos Labs Users
Unverified bridge security: USDG0 bridge smart contracts are described as 'audited' but no public audit reports are available for independent review. All cross-chain bridge protocols carry infinite-mint exploit risk, and USDG0's security cannot be independently verified.
Very early stage: Paxos Labs was incorporated in 2025 with only ~7 months of live operation. With limited public TVL data, small current scale ($510K+ in Hyperbeat), and no public GitHub repositories, it has minimal battle-testing.
Centralized control: Paxos Labs (not the MAS-regulated Paxos Digital Singapore) controls USDG0 smart contract upgrades and Amplify stack parameters with no disclosed timelock or governance mechanism.
ZK regulatory risk: USAD is a privacy stablecoin on Aleo with ZK transaction encryption. Privacy protocols have faced regulatory action (Tornado Cash OFAC sanctions, 2022). USAD's compliance model is novel with no clear regulatory precedent.
Top Risk Factors
- •USDG0 bridge exploit: USDG0 is USDG bridged via LayerZero OFT, with the source USDG locked in smart contracts described as 'audited' but with no public audit reports linked. A bridge exploit could enable unbacked USDG0 minting — the same infinite-mint risk that affected Wormhole and Ronin, with USDG0 contracts not yet independently verifiable.
- •MAS regulatory dependency: USDG (the backing for USDG0 and USAD) is issued by Paxos Digital Singapore under Monetary Authority of Singapore supervision. Regulatory action against Paxos Digital Singapore would halt new USDG minting and could restrict redemptions, cascading to USDG0 holders.
- •Centralized control: Paxos Labs (incorporated 2025) retains full control over USDG0 smart contract upgrades, Amplify stack configuration, and APY parameters. No DAO governance or timelock disclosed.
- •USAD ZK regulatory risk: USAD is a zero-knowledge privacy stablecoin on Aleo — an early-stage product with no published regulatory framework. Privacy tokens have faced regulatory action (Tornado Cash, 2022); USAD faces uncharted compliance risk as it scales.
How Paxos Labs Compares to Peers
Paxos Labs ranks #13 of 30 Stablecoin protocols (above-median). At a risk score of 41/100, it's in line with the sector average (43/100).
Adjacent peers: USDD (C+, 40/100) is ranked just safer, and Agora (C+, 42/100) is ranked just riskier.
See the full Stablecoin sector leaderboard or the Paxos Labs vs Agora comparison.
Common Questions about Paxos Labs
Plain-English answers based on Paxos Labs's scores across Hindenrank's 8 risk dimensions. The highest-scoring (riskiest) dimension is Documentation Gaps (7/10).
Has Paxos Labs ever been hacked or exploited?
Paxos Labs has had some operational issues or moderate incidents in its history. The track record dimension scored 6/15 — not catastrophic, but enough to flag. Look at the specific events and whether they were addressed by the team before drawing conclusions.
How much money is at stake in Paxos Labs?
Paxos Labs currently holds an undisclosed amount of user capital. Smaller TVL means individual depositors carry a larger share of any loss event, and it can be harder to exit a position quickly during stress.
What's the worst-case scenario for Paxos Labs?
Hindenrank has identified specific collapse scenarios for Paxos Labs. The most prominent: "Unverified Bridge Exploit Drains USDG0 Supply". The trigger condition is A smart contract vulnerability in the USDG0 OFT bridge contracts (no public audit verification) allows an attacker to mint USDG0 on HyperEVM without locking USDG on source chains.. Reading through the full scenario list on the protocol page is the single best way to understand the actual failure modes — generic "smart contract risk" is rarely the thing that takes a protocol down.
Is Paxos Labs regulated or insured?
Paxos Labs has some regulatory exposure (6/10), typical of mid-sized DeFi protocols. There is no specific enforcement action on record, but the structure includes elements that regulators have flagged in similar protocols. No DeFi protocol carries FDIC-style insurance — even with low regulatory risk, depositors are not protected in the way bank customers are.
What are the biggest red flags for Paxos Labs?
Hindenrank's retail-focused risk audit flagged: Unverified bridge security: USDG0 bridge smart contracts are described as 'audited' but no public audit reports are available for independent review. All cross-chain bridge protocols carry infinite-mint exploit risk, and USDG0's security cannot be independently verified. Very early stage: Paxos Labs was incorporated in 2025 with only ~7 months of live operation. With limited public TVL data, small current scale ($510K+ in Hyperbeat), and no public GitHub repositories, it has minimal battle-testing. Centralized control: Paxos Labs (not the MAS-regulated Paxos Digital Singapore) controls USDG0 smart contract upgrades and Amplify stack parameters with no disclosed timelock or governance mechanism. On the technical side, 1 critical-severity interaction risk has been identified.
Should beginners deposit into Paxos Labs?
Paxos Labs's C+ grade puts it in the elevated-risk band. This is not a beginner-friendly protocol. Anyone depositing here should treat the position as speculative and avoid concentrating significant savings in it.
How does Paxos Labs compare to safer Stablecoin alternatives?
Paxos Labs is one protocol in Hindenrank's Stablecoin coverage. The safest Stablecoin protocols on the leaderboard tend to share three traits: a long incident-free track record, conservative mechanism design, and high-quality public documentation. Compare Paxos Labs against the full Stablecoin ranking before committing capital.
For the full 8-dimension score breakdown, the radar chart, and dependency graph, see the Paxos Labs risk report.
Read the Full Paxos Labs Risk Report
This protocol has 2 collapse scenarios. 1 critical and 1 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.