Is Stacks Safe?
Risk Grade: B (25/100)
Stacks is rated as moderate risk — some novel mechanisms, generally well-understood.
Moderate risk — unique Bitcoin L2 with proven PoX consensus and real BTC yield, balanced by novel mechanism design and early-stage bridge infrastructure.
Stacks is the leading Bitcoin Layer 2 that enables smart contracts, DeFi applications, and programmable Bitcoin assets on top of Bitcoin's security through its unique Proof of Transfer (PoX) consensus mechanism. STX holders earn real BTC rewards at approximately 10% APY by participating in Stacking, and the protocol completed its transformative Nakamoto upgrade in late 2025, enabling 5-second block times with Bitcoin finality. With approximately $86M in DeFi TVL and growing institutional adoption (Fireblocks integration, USDC support via xReserve), the B grade reflects a strong track record with no base-layer exploits since 2021 launch, offset by the novel PoX consensus mechanism and the early-stage sBTC bridge.
TVL
$86M
Mechanisms
6
Interactions
5
Value Grade
C+
Key Risks for Stacks Users
Proof of Transfer is a consensus mechanism unique to Stacks where miners commit real BTC to produce blocks. While operational since 2021, the December 2025 Nakamoto upgrade significantly changed block production dynamics, and the new tenure extension model has limited production history at scale.
sBTC, the trust-minimized BTC bridge, relies on a signer set for peg management. Bridge protocols are historically high-value exploit targets, and sBTC's security model is still in its early deployment phase with a limited signer set.
The Stacks DeFi ecosystem has approximately $86M in TVL, making it relatively small. Individual protocol exploits can disproportionately impact the chain — the ALEX Protocol hack in June 2025 ($8.37M) affected the entire ecosystem and caused STX to drop 31%.
Genesis token distribution allocated 87% to founders, team, and investors, though most vesting has completed. The token supply grows through mining emissions with halvings every 4 years, approaching a total of ~2.04 billion STX.
Top Risk Factors
- •Proof of Transfer (PoX) is a novel consensus mechanism unique to Stacks where miners burn BTC to produce blocks and stackers earn BTC rewards — while live since 2021, the Nakamoto upgrade in late 2025 significantly changed block production dynamics (5-second blocks via tenure extensions), introducing relatively new consensus behavior at scale.
- •sBTC is a trust-minimized Bitcoin bridge that enables 1:1 BTC-backed tokens on Stacks, but its security relies on a signer set (currently a limited group) for peg management — bridge mechanisms are historically high-risk targets in DeFi, and sBTC is still in its early deployment phase.
- •The Stacks DeFi ecosystem is still maturing with ~$86M TVL, meaning individual protocol exploits (like the ALEX Protocol $8.37M hack in June 2025) can disproportionately impact the chain's overall ecosystem and user confidence.
- •Token distribution allocated 87% of the genesis supply to founders, team, and investors, though vesting has largely completed over 3-7 years and the token was distributed to 5,000+ unique entities.
How Stacks Compares to Peers
Stacks ranks #2 of 37 L2 protocols (top quartile — safer than most). At a risk score of 25/100, it's 12 points safer than the sector average of 37/100.
Adjacent peers: Xai (B, 24/100) is ranked just safer, and Arbitrum (B, 25/100) is ranked just riskier.
See the full L2 sector leaderboard or the Stacks vs Arbitrum comparison.
Common Questions about Stacks
Plain-English answers based on Stacks's scores across Hindenrank's 8 risk dimensions. The highest-scoring (riskiest) dimension is Scale Exposure (5/10).
Has Stacks ever been hacked or exploited?
Stacks has a fairly clean operational history. The track record dimension scored 3/15, indicating minor or no significant incidents on record. A clean track record is a positive signal but it does not guarantee future safety, especially as protocol complexity grows.
How much money is at stake in Stacks?
Stacks currently holds roughly $86M in user deposits. Smaller TVL means individual depositors carry a larger share of any loss event, and it can be harder to exit a position quickly during stress.
What's the worst-case scenario for Stacks?
Hindenrank has identified specific collapse scenarios for Stacks. The most prominent: "sBTC Bridge Signer Compromise Triggering DeFi Cascade". The trigger condition is Compromise of a threshold number of sBTC signers (via key theft, social engineering, or software vulnerability) enabling unauthorized withdrawal of BTC backing the sBTC supply, while sBTC TVL exceeds $100M and is widely used as DeFi collateral on Stacks. Reading through the full scenario list on the protocol page is the single best way to understand the actual failure modes — generic "smart contract risk" is rarely the thing that takes a protocol down.
Is Stacks regulated or insured?
Stacks has low regulatory exposure on Hindenrank's framework (2/10). The protocol is structured in a way that minimizes counterparty and jurisdiction concentration, though regulatory risk in crypto can change rapidly. No DeFi protocol carries FDIC-style insurance — even with low regulatory risk, depositors are not protected in the way bank customers are.
What are the biggest red flags for Stacks?
Hindenrank's retail-focused risk audit flagged: Proof of Transfer is a consensus mechanism unique to Stacks where miners commit real BTC to produce blocks. While operational since 2021, the December 2025 Nakamoto upgrade significantly changed block production dynamics, and the new tenure extension model has limited production history at scale. sBTC, the trust-minimized BTC bridge, relies on a signer set for peg management. Bridge protocols are historically high-value exploit targets, and sBTC's security model is still in its early deployment phase with a limited signer set. The Stacks DeFi ecosystem has approximately $86M in TVL, making it relatively small. Individual protocol exploits can disproportionately impact the chain — the ALEX Protocol hack in June 2025 ($8.37M) affected the entire ecosystem and caused STX to drop 31%.
Should beginners deposit into Stacks?
Stacks is rated B, which is acceptable for users who understand the protocol's mechanism. Beginners should read the full risk breakdown and only deposit after they can articulate the top three failure modes. If you cannot explain how the protocol works, do not deposit.
How does Stacks compare to safer L2 alternatives?
Stacks is one protocol in Hindenrank's L2 coverage. The safest L2 protocols on the leaderboard tend to share three traits: a long incident-free track record, conservative mechanism design, and high-quality public documentation. Compare Stacks against the full L2 ranking before committing capital.
For the full 8-dimension score breakdown, the radar chart, and dependency graph, see the Stacks risk report.
Read the Full Stacks Risk Report
This protocol has 2 collapse scenarios. 1 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.