Skip to content
PROTOCOL RESEARCH

World Liberty Financial risk

Politically affiliated token and stablecoin complex whose USD1 contract carries on-chain owner powers to mint, freeze, drain and reallocate holder funds behind an upgradeable proxy, whose team blacklisted 270+ WLFI wallets in Sep 2025, and whose economics are majority-insider per Reuters; two reds on fund-loss surfaces gate it to avoid.
AvoidResearched Jul 2, 2026

Scorecard

watch: Audits & contractsOnly a Cyfrin audit of the WLFI Lockbox contract (Aug 2025) is confirmed; no other audit firm surfaced for the WLFI token or USD1 contracts in this run.
weak: Admin controlVerified on-chain: USD1 is an upgradeable proxy with owner-controlled mint, freeze, drain and reallocate functions; the team blacklisted 270+ WLFI wallets in Sep 2025, including Justin Sun's.
watch: OracleNo protocol oracle surface of its own; USD1 peg rests on reserves with claimed monthly attestations and a referenced Chainlink PoR feed, but no named attestation firm confirmed.
watch: Liquidity & exitWLFI trades ~$26M/day at ~$1.86B mcap, but ~68% of supply is non-circulating overhang and USD1 exit depends on centralized redemption; the Dolomite USD1 pool sat at ~93% utilization.
watch: Yield (real vs emission)No native yield; USD1 reserve interest accrues to the issuer, not holders, and DeFi yields on USD1/WLFI are incentive-driven.
weak: Holder concentrationReuters (Jun 2026) reported Trump family entities received the majority of WLFI token-sale revenue (over $1.4B of ~$2.3B total crypto profits); only ~32% of supply circulates.
watch: Track recordNo contract exploit confirmed, but WLFI is down ~82% from its Sep 2025 ATH in ten months of trading and the mass freeze incident is on the record.
🟢 strong🟡 watch / caveat🔴 weak / fund-loss risk
Verdict is a gate (worst flaw wins), not an average. Our read, not financial advice.

TL;DR

World Liberty Financial is two things: the WLFI governance token and the USD1 stablecoin, both run by a company publicly affiliated with the Trump family (its own materials and Reuters reporting state family entities take the bulk of token-sale revenue). USD1 has grown to roughly $4.6B in circulation, which is real scale. But this is not a DeFi protocol in the usual sense. There is no tracked on-chain protocol TVL on DeFiLlama, USD1 minting and reserves sit entirely with the company, and the team has already used its freeze power at scale, blacklisting more than 270 WLFI wallets in September 2025, Justin Sun's among them. We verified on-chain this run that the USD1 contract itself gives its owner the power to freeze any address, drain frozen accounts, and reallocate the funds. Two reds on fund-loss surfaces. Our watchlist exposure is indirect, through Dolomite, where WLFI collateral concentration is already flagged red.

Checklist

Audits & contracts. Thin and mostly unconfirmed. The only audit we could verify is Cyfrin's review of the WLFI Lockbox contract (Aug 2025). An X search this run surfaced no other named audit firm (no PeckShield, Zokyo, or Halborn engagement) for the WLFI token or the USD1 contracts across their nine-plus chains. Absence of a confirmed audit is not the same as a failed one, but at $4.6B of stablecoin supply the burden of proof is on the issuer. Full audit trail stays refresh.

Admin control. The decisive red, and this run moved it from reported to verified. On-chain (Etherscan, checked 2026-07-02): USD1 on Ethereum is a TransparentUpgradeableProxy, and the implementation exposes owner-only mint, freeze, unfreeze, drain (event: FrozenAccountDrained), reallocate (event: FrozenFundsReallocated), and pause. That is seizure power written into the token, plus the ability to swap the entire contract logic via upgrade. It has been exercised: in September 2025 the team blacklisted more than 270 WLFI wallets (reports cite 270 to 272), the most prominent being Justin Sun's, whose frozen stake was reported around the $100M mark (exact value refresh). Reports in June 2026 (The Block, via X) say WLFI is near an OCC federal trust charter, which would put reserves under federal banking supervision; that is pending, not done.

Freeze / seizure. The freeze is per-address, not the contract-wide pause sitting beside it: a frozen holder's USD1 stops moving while everyone else transacts normally, and the trigger is the token's owner, a role-gated controller contract (0xee9b…61c2) whose freezer role is held by a 3-of-6 Safe (0x0d19…289d) and one plain EOA (0x6802…ee66), with a batchFreeze entry point and no timelock in front of it (verified on-chain 2026-07-27).

Oracle. There is no protocol oracle to assess because there is no live lending or AMM protocol at scale. The relevant price-truth question is the USD1 peg. The team claims monthly reserve attestations and X posts reference a Chainlink Proof of Reserve feed, but we could not confirm a named accounting firm behind any attestation report. BitGo custody of reserves is corroborated by multiple posts. For a stablecoin this size, an attestation trail without a named firm stays refresh until proven.

Liquidity & exit. Mixed. WLFI itself is liquid for a tier-4 name: ~$26M daily volume against a ~$1.86B market cap. But only ~31.8B of 100B tokens circulate, so roughly 68% of supply is a locked overhang with an unlock schedule we could not confirm. USD1 exit for a DeFi user means selling into DEX/CEX liquidity or trusting centralized redemption, and the contract owner can freeze the address mid-exit. The one place our watchlist touches this complex, Dolomite, showed the failure mode in April-May 2026: a USD1 pool at ~93% utilization where depositors could not all withdraw, sitting under ~$459M of WLFI collateral.

Yield: real vs emission. WLFI pays no native yield. Interest on USD1 reserves accrues to the issuer, not to holders, which is the Tether model. Any yield you see on USD1 or WLFI in DeFi venues is lending demand or incentive emissions on those venues, not revenue shared by World Liberty Financial. Treat every advertised USD1 APR as venue risk plus issuer risk stacked.

Holder concentration. The second red. Reuters reported (Jun 2026, corroborated across X) that Trump family entities received the majority of revenue from WLFI token sales, over $1.4B, as part of roughly $2.3B in total crypto profits. Public reporting has consistently described a majority insider allocation to family-linked entities and early backers; the exact current split is refresh. On-chain top-holder snapshots were paywalled in this run, but the circulating figure alone, ~32% of supply, tells you where the leverage sits.

Track record. Short and rough. WLFI only became transferable after a governance vote, trading from September 2025. It printed its ATH of $0.331 on day one (2025-09-01) and now trades at $0.058, down about 82% in ten months. No hack, exploit, depeg, or new freeze incident involving WLFI or USD1 surfaced in a May-June 2026 news scan, and USD1 has held its peg (~$0.9987 today). The mass freeze and the political entanglement are the track record.

Worst case

Two paths, both plausible. First: you hold WLFI or USD1 directly and the issuer freezes your address, as it did to 270+ wallets in September 2025; for USD1 the contract owner can then drain and reallocate the balance, and there is no appeal layer you control. Second: USD1 reserves turn out weaker than claimed, or a political or regulatory shock hits the family-linked issuer, USD1 depegs, and everything collateralized by WLFI or USD1 downstream (the Dolomite pools are the live example) unwinds into bad debt while retail depositors are stuck behind high utilization. No insurance fund on any leg.

Bottom line

Avoid for direct exposure. The issuer has demonstrated seizure power over holder tokens at scale, the USD1 contract encodes freeze-drain-reallocate authority under a single upgradeable owner, reserves lack a confirmed attestation firm, and the token's economics concentrate value with insiders to a degree unusual even for tier-4 names. This gates to avoid on worst-flaw-wins regardless of USD1's scale or clean peg history. Our only sanctioned touchpoint stays indirect via Dolomite, where the WLFI and USD1 pools are already flagged do-not-lend. Re-rate if the OCC trust charter lands and reserve attestations by a named firm start publishing.

Data appendix

  • TVL: No tracked protocol TVL; DeFiLlama slug world-liberty-financial (category Lending) returns TVL null (verified live this run). USD1 stablecoin circulating: ~$4.64B at $0.9987 (DeFiLlama stablecoins API, id 262); ~$4.61B mcap (CoinGecko).
  • WLFI market: price $0.0584, mcap ~$1.86B (rank ~45), FDV ~$5.84B, circulating 31.77B / 100B max, 24h vol ~$25.8M, ATH $0.331 (2025-09-01), now ~-82% from ATH (CoinGecko, 2026-07-02).
  • Contracts: WLFI (Ethereum) 0xda5e1988097297dcdc1f90d4dfe7909e847cbef6; USD1 (Ethereum) 0x8d0d000ee44948fc98c9b98a4fa4921476f08b0d, verified this run as a TransparentUpgradeableProxy (implementation 0x694aa534bdef8ed63244eb902e7914e527891f08) with owner-only mint, freeze, drain, reallocate, pause. USD1 is also issued on BSC and multiple other chains (exact current chain list refresh).
  • Audits: Cyfrin, WLFI Lockbox contract (Aug 2025, confirmed via X). No other audit firm found for WLFI token / USD1 in this run; full trail refresh.
  • Admin/governance: Sep 2025 blacklist of 270+ WLFI wallets (reports cite 270-272) incl. Justin Sun; his frozen stake reported around $100M, exact value refresh (X reports, Sep 2025). USD1 mint fully centralized with issuer (owner-only mint, on-chain). OCC federal trust charter reported near approval, still pending (The Block, Jun 2026, via X): refresh.
  • Oracle: N/A at protocol level; USD1 peg $0.9987 (DeFiLlama). Monthly attestations claimed and a Chainlink Proof of Reserve feed referenced in posts; no named attestation firm confirmed: refresh. BitGo reserve custody: corroborated (X posts, Feb-Jun 2026).
  • Holder concentration: Reuters (Jun 2026, via X): Trump family entities received the majority of WLFI token-sale revenue (over $1.4B) within ~$2.3B total crypto profits. Circulating ~32% of supply. On-chain top-holder snapshot: refresh (paywalled this run).
  • Recent-news scan (May-Jun 2026): no hack, exploit, depeg, or new freeze incident found; OCC charter reportedly near; GENIUS Act compliance claimed by team, unaudited claim.
  • Cross-reference: Dolomite report (this repo, apps/showcase/content/research/dolomite.md, verified): WLFI ~$458.9M / ~55% of ~$835.7M Dolomite collateral, USD1 pool ~93% utilization (Apr-May 2026 snapshot), Liquidity & exit red there.

Maintained monthly. Methodology: DeFi Research Instruction v2.

← all protocols