Elevated risk — severe regulatory headwinds across multiple jurisdictions and novel hardware-dependent identity infrastructure, partially offset by strong funding, audited smart contracts, and active development.
Top Risks
1
Severe regulatory exposure across multiple jurisdictions: banned or investigated in 8+ countries (Spain, Kenya, Germany, Indonesia) over biometric data collection practices, with Kenya ordering deletion of all collected iris data in May 2025.
2
Biometric data permanence risk: iris scans are irreversible biometric identifiers. Even with hash-based storage, the underlying data collection creates unique attack surfaces for identity theft that cannot be remediated by revoking credentials.
3
Heavy token unlock pressure: only about 27% of WLD supply is circulating, with large insider tranches (13.78% investors, 10.02% team) unlocking through 2026, creating sustained sell pressure.
4
Centralized identity infrastructure: the Orb hardware is manufactured and distributed by Tools for Humanity, creating a single point of failure for the identity verification pipeline. Orb operator credential theft was reported in 2023.
Risk Breakdown
Frequently Asked Questions
Is Worldcoin safe to use?
Worldcoin receives a C+ risk grade (40/100) from Hindenrank, where lower scores indicate lower risk. Elevated risk — severe regulatory headwinds across multiple jurisdictions and novel hardware-dependent identity infrastructure, partially offset by strong funding, audited smart contracts, and active development. Worldcoin (now World) is a biometric identity and blockchain project that uses custom Orb hardware to scan users' irises and create zero-knowledge proof-of-personhood credentials. The project operates World Chain, an OP Stack L2 with approximately $89M TVL that prioritizes verified humans for transaction inclusion. Backed by $315M in funding from a16z and Blockchain Capital, its C+ risk grade reflects severe regulatory exposure across 8+ countries that have banned or investigated its biometric data practices, combined with the novel and hardware-dependent nature of its identity verification system.
What are the main risks of using Worldcoin?
The key risks identified for Worldcoin are: (1) Worldcoin has been banned or investigated in 8+ countries including Spain, Kenya, Germany, and Indonesia over biometric data collection concerns. Kenya ordered deletion of all collected iris data in May 2025, and Germany ordered non-compliant data deletion in December 2024. (2) The Orb hardware is manufactured and controlled by Tools for Humanity, creating centralized dependency for the identity pipeline. Orb operator credentials were stolen by hackers in 2023, though no identity data was compromised. (3) Only about 27% of WLD tokens are currently circulating, with insider allocations (13.78% investors, 10.02% team) on vesting schedules through 2026, creating ongoing sell pressure against limited market absorption. (4) Iris biometric data is permanent and irreversible — unlike passwords, compromised biometric identifiers cannot be changed, creating unique long-term security risks for enrolled users.
What is Worldcoin's risk score breakdown?
Worldcoin scores 40/100 across eight risk dimensions: Mechanism Novelty: 6/15, Interaction Severity: 6/20, Oracle Surface: 2/10, Documentation Gaps: 3/10, Track Record: 3/15, Scale Exposure: 7/10, Regulatory Risk: 8/10, Vitality Risk: 5/10. The highest risk area is Regulatory Risk at 8/10.
How does Worldcoin compare to other L1 protocols?
Among 56 rated L1 protocols on Hindenrank, Worldcoin ranks #43 by safety (lowest risk score = safest). Its 40/100 risk score and C+ grade place it among the riskier L1 protocols.
Has Worldcoin ever been hacked or exploited?
Worldcoin scores 3/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.