Elevated risk — severe regulatory headwinds across multiple jurisdictions and novel hardware-dependent identity infrastructure, partially offset by strong funding, audited smart contracts, and active development.
Risk Breakdown
Top Risks
Severe regulatory exposure across multiple jurisdictions: banned or investigated in 8+ countries (Spain, Kenya, Germany, Indonesia) over biometric data collection practices, with Kenya ordering deletion of all collected iris data in May 2025.
Biometric data permanence risk: iris scans are irreversible biometric identifiers. Even with hash-based storage, the underlying data collection creates unique attack surfaces for identity theft that cannot be remediated by revoking credentials.
Heavy token unlock pressure: only about 27% of WLD supply is circulating, with large insider tranches (13.78% investors, 10.02% team) unlocking through 2026, creating sustained sell pressure.
Centralized identity infrastructure: the Orb hardware is manufactured and distributed by Tools for Humanity, creating a single point of failure for the identity verification pipeline. Orb operator credential theft was reported in 2023.
Frequently Asked Questions
Is Worldcoin safe to use?
What are the main risks of using Worldcoin?
What is Worldcoin's risk score breakdown?
How does Worldcoin compare to other L1 protocols?
Has Worldcoin ever been hacked or exploited?
Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.