//WBTC (Wrapped Bitcoin)
C

WBTC (Wrapped Bitcoin)

Risk Score 50/100·BValue
Compare
$7.4BTVL·$7.3BFDV·BridgeWebsite →

WBTC is the dominant Bitcoin bridge for DeFi with $7.4B TVL, but its centralized custody model concentrates significant risk in Justin Sun-affiliated entities. BiT Global completed its 2-of-3 key control transition in May 2026. UK and EU sanctions on Justin Sun's HTX exchange (2026) elevate the Sun entity regulatory risk profile. Rate: C (medium risk) — suitable as a DeFi primitive only for users comfortable with custodial bridge risk and Justin Sun entity exposure.

Risk Breakdown

Top Risks

1

Custodial 2-of-3 key concentration in Justin Sun entities: BiT Global (Justin Sun-affiliated, HK) now holds two of the three keys in WBTC's custody vault arrangement — the user key (Hong Kong) and backup key (Singapore) — while BitGo retains one key and provides infrastructure. A BiT Global insolvency, regulatory seizure, or governance dispute could impair the 1:1 BTC backing on ~$7.4B of circulating WBTC. BitGo's OCC bank charter and Fortune 500 status (NYSE: BTGO) provide a strong institutional backstop on the BitGo side.

2

Escalating regulatory risk from Justin Sun entity sanctions: In May 2026, the UK FCDO sanctioned HTX (Justin Sun's exchange) for Russia sanctions evasion. The EU added HTX to its 21st sanctions package effective August 23, 2026. While BiT Global is distinct from HTX, both are Justin Sun-controlled entities, and these actions establish documented precedent for G7+ regulatory action against Sun-affiliated operations. The EU sanctions create concrete compliance barriers for European counterparties interacting with Sun entities.

3

DeFi integration contagion: WBTC is embedded as collateral in Aave, SparkLend/MakerDAO, Compound, and Curve. A loss of confidence in BiT Global (e.g., regulatory action, custody dispute) would trigger simultaneous DeFi liquidations across billions of positions even if BitGo operations remain unaffected. In 2024, custody controversy alone caused multiple protocols to preemptively reduce WBTC collateral ratios.

4

Proof-of-Reserves lag: Chainlink PoR feeds are updated monthly and rely on custodian cooperation. A custodian that has secretly lost BTC could continue providing attestation for weeks before detection. During this lag, WBTC would trade at full BTC value despite impaired backing.

5

Cross-chain bridge surface and emerging native-BTC competition: WBTC is deployed on 20+ chains via LayerZero OFT (DVN hardened after KelpDAO exploit, April 2026). Babylon Labs submitted a proposal in May 2026 to bring trustless native BTC collateral to Aave V4 via Taproot-secured vaultBTC, eliminating custodians entirely — representing the most credible competitive threat to WBTC's DeFi role if adopted.

Frequently Asked Questions

Is WBTC (Wrapped Bitcoin) safe to use?
WBTC (Wrapped Bitcoin) receives a C risk grade (50/100) from Hindenrank, where lower scores indicate lower risk. WBTC is the dominant Bitcoin bridge for DeFi with $7.4B TVL, but its centralized custody model concentrates significant risk in Justin Sun-affiliated entities. BiT Global completed its 2-of-3 key control transition in May 2026. UK and EU sanctions on Justin Sun's HTX exchange (2026) elevate the Sun entity regulatory risk profile. Rate: C (medium risk) — suitable as a DeFi primitive only for users comfortable with custodial bridge risk and Justin Sun entity exposure. WBTC is the most widely-used tokenized Bitcoin on Ethereum, letting BTC holders participate in DeFi. However, it requires trusting centralized custodians (BitGo and BiT Global) to hold the actual Bitcoin — unlike native crypto protocols, there is no smart contract guarantee that your WBTC is fully backed. BiT Global (Justin Sun-affiliated) now holds two of the three custody keys.
What are the main risks of using WBTC (Wrapped Bitcoin)?
The key risks identified for WBTC (Wrapped Bitcoin) are: (1) Your WBTC is only as safe as its custodians — if BitGo or BiT Global fails, your tokens may not be redeemable for BTC. (2) BiT Global (Justin Sun-affiliated) controls two of the three custody keys. UK and EU regulators sanctioned another Sun entity (HTX) in 2026 for Russia sanctions evasion. (3) Governance decisions by the WBTC DAO can change custodians without your consent.
What is WBTC (Wrapped Bitcoin)'s risk score breakdown?
WBTC (Wrapped Bitcoin) scores 50/100 across eight risk dimensions: Mechanism Novelty: 4/15, Interaction Severity: 10/20, Oracle Surface: 5/10, Documentation Gaps: 4/10, Track Record: 5/15, Scale Exposure: 9/10, Regulatory Risk: 6/10, Vitality Risk: 7/10. The highest risk area is Scale Exposure at 9/10.
How does WBTC (Wrapped Bitcoin) compare to other Bridge protocols?
Among 28 rated Bridge protocols on Hindenrank, WBTC (Wrapped Bitcoin) ranks #20 by safety (lowest risk score = safest). Its 50/100 risk score and C grade place it among the riskier Bridge protocols.
Has WBTC (Wrapped Bitcoin) ever been hacked or exploited?
WBTC (Wrapped Bitcoin) scores 5/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.
Last scanned 2026-08-01

Get risk alerts before it's too late

Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.