Is Worldcoin Safe?
Risk Grade: C+ (40/100)
Worldcoin is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
Elevated risk — severe regulatory headwinds across multiple jurisdictions and novel hardware-dependent identity infrastructure, partially offset by strong funding, audited smart contracts, and active development.
Worldcoin (now World) is a biometric identity and blockchain project that uses custom Orb hardware to scan users' irises and create zero-knowledge proof-of-personhood credentials. The project operates World Chain, an OP Stack L2 with approximately $89M TVL that prioritizes verified humans for transaction inclusion. Backed by $315M in funding from a16z and Blockchain Capital, its C+ risk grade reflects severe regulatory exposure across 8+ countries that have banned or investigated its biometric data practices, combined with the novel and hardware-dependent nature of its identity verification system.
TVL
$89M
Mechanisms
7
Interactions
5
Value Grade
D
Key Risks for Worldcoin Users
Worldcoin has been banned or investigated in 8+ countries including Spain, Kenya, Germany, and Indonesia over biometric data collection concerns. Kenya ordered deletion of all collected iris data in May 2025, and Germany ordered non-compliant data deletion in December 2024.
The Orb hardware is manufactured and controlled by Tools for Humanity, creating centralized dependency for the identity pipeline. Orb operator credentials were stolen by hackers in 2023, though no identity data was compromised.
Only about 27% of WLD tokens are currently circulating, with insider allocations (13.78% investors, 10.02% team) on vesting schedules through 2026, creating ongoing sell pressure against limited market absorption.
Iris biometric data is permanent and irreversible — unlike passwords, compromised biometric identifiers cannot be changed, creating unique long-term security risks for enrolled users.
Top Risk Factors
- •Severe regulatory exposure across multiple jurisdictions: banned or investigated in 8+ countries (Spain, Kenya, Germany, Indonesia) over biometric data collection practices, with Kenya ordering deletion of all collected iris data in May 2025.
- •Biometric data permanence risk: iris scans are irreversible biometric identifiers. Even with hash-based storage, the underlying data collection creates unique attack surfaces for identity theft that cannot be remediated by revoking credentials.
- •Heavy token unlock pressure: only about 27% of WLD supply is circulating, with large insider tranches (13.78% investors, 10.02% team) unlocking through 2026, creating sustained sell pressure.
- •Centralized identity infrastructure: the Orb hardware is manufactured and distributed by Tools for Humanity, creating a single point of failure for the identity verification pipeline. Orb operator credential theft was reported in 2023.
Risk Score Breakdown
Worldcoin's highest risk area is Regulatory Risk (8/10). Here's how each dimension contributes to the overall 40/100 score:
Read the Full Worldcoin Risk Report
This protocol has 2 collapse scenarios. 2 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Considering an investment?