Is Wormhole Safe?
Risk Grade: C (43/100)
Wormhole is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
Moderate risk — massive scale and institutional backing, but the $320M exploit proved the 19-node security model can fail catastrophically
A cross-chain bridge that moves tokens and messages between 30+ blockchains, secured by 19 validator nodes. It handles $1B in locked assets and $60B+ in annual transfer volume, backed by $225M in funding. Its C grade reflects a $320M hack in 2022 where an attacker minted fake tokens, plus a governance token that has dropped 90% since launch.
TVL
$1.9B
Mechanisms
7
Interactions
6
Value Grade
C-
Key Risks for Wormhole Users
An attacker minted $320M in fake tokens in February 2022 by exploiting a signature bug -- only Jump Crypto's bailout prevented total loss for users
Just 19 validator nodes secure $60B+ in annual volume -- if 13 of them get compromised, an attacker can mint unlimited fake tokens on any chain
The governance token has dropped 90% since launch, with 1.8B more tokens unlocking by 2026 -- this weakens the economic incentive for validators to stay honest
Top Risk Factors
- •February 2022 exploit allowed minting 120,000 wETH ($320M) without collateral via signature verification bug; Jump Crypto backstopped losses
- •19-Guardian multisig secures $60B+ annual cross-chain volume; compromise of 13 Guardians enables catastrophic infinite mint
- •W token down 90% since launch with 1.8B additional tokens unlocking by 2026, undermining Guardian economic security incentives
How Wormhole Compares to Peers
Wormhole ranks #14 of 24 Bridge protocols (below-median — riskier than average). At a risk score of 43/100, it's in line with the sector average (43/100).
Adjacent peers: LayerZero (C+, 42/100) is ranked just safer, and Synapse (C, 44/100) is ranked just riskier.
Wormhole holds 57% of TVL across all rated Bridge protocols ($1.9B of $3.3B total). Sector concentration here means a failure would have outsized systemic effects.
See the full Bridge sector leaderboard or the Wormhole vs Synapse comparison.
Common Questions about Wormhole
Plain-English answers based on Wormhole's scores across Hindenrank's 8 risk dimensions. The highest-scoring (riskiest) dimension is Scale Exposure (7/10).
Has Wormhole ever been hacked or exploited?
Wormhole has had some operational issues or moderate incidents in its history. The track record dimension scored 10/15 — not catastrophic, but enough to flag. Look at the specific events and whether they were addressed by the team before drawing conclusions.
How much money is at stake in Wormhole?
Wormhole currently holds over $1.9B in user deposits. A protocol of this size typically has deeper liquidity, more eyes on the code, and more attention from auditors — but it also means a single failure has a much larger blast radius.
What's the worst-case scenario for Wormhole?
Hindenrank has identified specific collapse scenarios for Wormhole. The most prominent: "Guardian Network Compromise and Infinite Mint". The trigger condition is An attacker compromises a supermajority (13 of 19) of Guardian nodes, enabling forged Verifiable Action Approvals (VAAs) to mint unbacked wrapped assets on any connected chain. Reading through the full scenario list on the protocol page is the single best way to understand the actual failure modes — generic "smart contract risk" is rarely the thing that takes a protocol down.
Is Wormhole regulated or insured?
Wormhole has low regulatory exposure on Hindenrank's framework (2/10). The protocol is structured in a way that minimizes counterparty and jurisdiction concentration, though regulatory risk in crypto can change rapidly. No DeFi protocol carries FDIC-style insurance — even with low regulatory risk, depositors are not protected in the way bank customers are.
What are the biggest red flags for Wormhole?
Hindenrank's retail-focused risk audit flagged: An attacker minted $320M in fake tokens in February 2022 by exploiting a signature bug -- only Jump Crypto's bailout prevented total loss for users Just 19 validator nodes secure $60B+ in annual volume -- if 13 of them get compromised, an attacker can mint unlimited fake tokens on any chain The governance token has dropped 90% since launch, with 1.8B more tokens unlocking by 2026 -- this weakens the economic incentive for validators to stay honest On the technical side, 2 critical-severity interaction risks have been identified.
Should beginners deposit into Wormhole?
Wormhole's C grade puts it in the elevated-risk band. This is not a beginner-friendly protocol. Anyone depositing here should treat the position as speculative and avoid concentrating significant savings in it.
How does Wormhole compare to safer Bridge alternatives?
Wormhole is one protocol in Hindenrank's Bridge coverage. The safest Bridge protocols on the leaderboard tend to share three traits: a long incident-free track record, conservative mechanism design, and high-quality public documentation. Compare Wormhole against the full Bridge ranking before committing capital.
For the full 8-dimension score breakdown, the radar chart, and dependency graph, see the Wormhole risk report.
Read the Full Wormhole Risk Report
This protocol has 3 collapse scenarios. 2 critical and 2 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.