Worldcoin

Worldcoin receives a C+ risk grade (40/100) from Hindenrank, where lower scores indicate lower risk. Elevated risk — severe regulatory headwinds across multiple jurisdictions amplified by mainstream platform expansion (Zoom, Docusign, Tinder), novel hardware-dependent identity infrastructure, and Foundation token sales at price lows, partially offset by strong funding, audited smart contracts, and genuine product traction with AI agent use cases. Worldcoin (now World) is a biometric identity and blockchain project that uses custom Orb hardware to scan users' irises and create zero-knowledge proof-of-personhood credentials. The project operates World Chain, an OP Stack L2 with approximately $41M TVL (recovered from a $1.5M floor in March 2026) that prioritizes verified humans for transaction inclusion. In April 2026, World expanded World ID integrations to Zoom, Docusign, and Tinder for deepfake detection and human verification. Backed by $315M in funding from a16z and Blockchain Capital, its C+ risk grade reflects severe regulatory exposure across 8+ countries that have banned or investigated its biometric data practices, the escalating surface from mainstream platform integrations, and the novel and hardware-dependent nature of its identity verification system.

The key risks identified for Worldcoin are: (1) Worldcoin has been banned or investigated in 8+ countries including Spain, Kenya, Germany, and Indonesia over biometric data collection concerns. The April 2026 expansion to Zoom, Docusign, and Tinder significantly raises the GDPR and Asian regulatory surface. (2) The World Foundation sold $65M in WLD in March 2026 when WLD was trading near its all-time low of $0.23, signaling either operational funding pressure or loss of confidence. Only ~33.8% of the 10B total supply is currently circulating. (3) The Orb hardware is manufactured and controlled by Tools for Humanity, creating centralized dependency for the identity pipeline. Orb operator credentials were stolen by hackers in 2023, though no identity data was compromised. (4) Iris biometric data is permanent and irreversible — unlike passwords, compromised biometric identifiers cannot be changed, creating unique long-term security risks for enrolled users, now amplified by integration with mainstream consumer and enterprise platforms.

Worldcoin scores 40/100 across eight risk dimensions: Mechanism Novelty: 6/15, Interaction Severity: 6/20, Oracle Surface: 2/10, Documentation Gaps: 3/10, Track Record: 3/15, Scale Exposure: 7/10, Regulatory Risk: 9/10, Vitality Risk: 4/10. The highest risk area is Regulatory Risk at 9/10.

Among 58 rated L1 protocols on Hindenrank, Worldcoin ranks #45 by safety (lowest risk score = safest). Its 40/100 risk score and C+ grade place it among the riskier L1 protocols.

Worldcoin scores 3/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.