Is Worldcoin Safe?
Risk Grade: C+ (41/100)
Worldcoin is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
Elevated risk — severe regulatory headwinds across multiple jurisdictions and novel hardware-dependent identity infrastructure, partially offset by strong funding, audited smart contracts, and active development.
Worldcoin (now World) is a biometric identity and blockchain project that uses custom Orb hardware to scan users' irises and create zero-knowledge proof-of-personhood credentials. The project operates World Chain, an OP Stack L2 with approximately $89M TVL that prioritizes verified humans for transaction inclusion. Backed by $315M in funding from a16z and Blockchain Capital, its C+ risk grade reflects severe regulatory exposure across 8+ countries that have banned or investigated its biometric data practices, combined with the novel and hardware-dependent nature of its identity verification system.
TVL
$89M
Mechanisms
7
Interactions
5
Value Grade
D
Key Risks for Worldcoin Users
Worldcoin has been banned or investigated in 8+ countries including Spain, Kenya, Germany, and Indonesia over biometric data collection concerns. Kenya ordered deletion of all collected iris data in May 2025, and Germany ordered non-compliant data deletion in December 2024.
The Orb hardware is manufactured and controlled by Tools for Humanity, creating centralized dependency for the identity pipeline. Orb operator credentials were stolen by hackers in 2023, though no identity data was compromised.
Only about 27% of WLD tokens are currently circulating, with insider allocations (13.78% investors, 10.02% team) on vesting schedules through 2026, creating ongoing sell pressure against limited market absorption.
Iris biometric data is permanent and irreversible — unlike passwords, compromised biometric identifiers cannot be changed, creating unique long-term security risks for enrolled users.
Top Risk Factors
- •Severe regulatory exposure across multiple jurisdictions: banned or investigated in 8+ countries (Spain, Kenya, Germany, Indonesia) over biometric data collection practices, with Kenya ordering deletion of all collected iris data in May 2025.
- •Biometric data permanence risk: iris scans are irreversible biometric identifiers. Even with hash-based storage, the underlying data collection creates unique attack surfaces for identity theft that cannot be remediated by revoking credentials.
- •Heavy token unlock pressure: only about 27% of WLD supply is circulating, with large insider tranches (13.78% investors, 10.02% team) unlocking through 2026, creating sustained sell pressure.
- •Centralized identity infrastructure: the Orb hardware is manufactured and distributed by Tools for Humanity, creating a single point of failure for the identity verification pipeline. Orb operator credential theft was reported in 2023.
How Worldcoin Compares to Peers
Worldcoin ranks #41 of 56 L1 protocols (below-median — riskier than average). At a risk score of 41/100, it's 6 points riskier than the sector average of 35/100.
Adjacent peers: BNB Chain (C+, 39/100) is ranked just safer, and Sui (C+, 42/100) is ranked just riskier.
See the full L1 sector leaderboard or the Worldcoin vs Sui comparison.
Common Questions about Worldcoin
Plain-English answers based on Worldcoin's scores across Hindenrank's 8 risk dimensions. The highest-scoring (riskiest) dimension is Regulatory Risk (8/10).
Has Worldcoin ever been hacked or exploited?
Worldcoin has a fairly clean operational history. The track record dimension scored 3/15, indicating minor or no significant incidents on record. A clean track record is a positive signal but it does not guarantee future safety, especially as protocol complexity grows.
How much money is at stake in Worldcoin?
Worldcoin currently holds roughly $89M in user deposits. Smaller TVL means individual depositors carry a larger share of any loss event, and it can be harder to exit a position quickly during stress.
What's the worst-case scenario for Worldcoin?
Hindenrank has identified specific collapse scenarios for Worldcoin. The most prominent: "Coordinated Regulatory Shutdown of Orb Operations". The trigger condition is 3+ major jurisdictions (covering >40% of active Orb locations) simultaneously ban or halt biometric data collection operations within a 90-day period.. Reading through the full scenario list on the protocol page is the single best way to understand the actual failure modes — generic "smart contract risk" is rarely the thing that takes a protocol down.
Is Worldcoin regulated or insured?
Worldcoin faces material regulatory exposure (8/10 on this dimension). This may stem from counterparty concentration, jurisdiction risk, or specific products attracting enforcement attention. Users in regulated jurisdictions should consider whether they are comfortable with this profile before depositing. No DeFi protocol carries FDIC-style insurance — even with low regulatory risk, depositors are not protected in the way bank customers are.
What are the biggest red flags for Worldcoin?
Hindenrank's retail-focused risk audit flagged: Worldcoin has been banned or investigated in 8+ countries including Spain, Kenya, Germany, and Indonesia over biometric data collection concerns. Kenya ordered deletion of all collected iris data in May 2025, and Germany ordered non-compliant data deletion in December 2024. The Orb hardware is manufactured and controlled by Tools for Humanity, creating centralized dependency for the identity pipeline. Orb operator credentials were stolen by hackers in 2023, though no identity data was compromised. Only about 27% of WLD tokens are currently circulating, with insider allocations (13.78% investors, 10.02% team) on vesting schedules through 2026, creating ongoing sell pressure against limited market absorption.
Should beginners deposit into Worldcoin?
Worldcoin's C+ grade puts it in the elevated-risk band. This is not a beginner-friendly protocol. Anyone depositing here should treat the position as speculative and avoid concentrating significant savings in it.
How does Worldcoin compare to safer L1 alternatives?
Worldcoin is one protocol in Hindenrank's L1 coverage. The safest L1 protocols on the leaderboard tend to share three traits: a long incident-free track record, conservative mechanism design, and high-quality public documentation. Compare Worldcoin against the full L1 ranking before committing capital.
For the full 8-dimension score breakdown, the radar chart, and dependency graph, see the Worldcoin risk report.
Read the Full Worldcoin Risk Report
This protocol has 2 collapse scenarios. 2 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.