World Chain Bridge

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

REJECTED, ON L2BEAT’S OWN STRUCTURED RISK DATA RATHER THAN A NARRATIVE SUMMARY. World Chain is an OP Stack rollup built and operated by Tools for Humanity (the Worldcoin/World ID organization), and on paper it shares the Optimism Superchain’s governance model already reviewed in this registry. But L2Beat’s own contract-level assessment states World Chain ”is not even a Stage 0 project,” identifies fewer than five external actors able to submit fault-proof challenges — meaning state validation runs through a permissioned dispute game, not Base’s permissionless one — and flags ”no delay on code upgrades” as a CRITICAL risk. That is a materially weaker structure than Base, Arbitrum, or Optimism, all approved with limits in this registry, despite superficially similar Superchain branding.

Kill criteria: the events that revoke this verdict
• World Chain’s fault-proof challenger set becomes permissionless, matching Base’s design
• L2Beat no longer flags no-delay code upgrades as a critical risk for World Chain specifically
• Any confirmed exploit of World Chain’s OptimismPortal or L1StandardBridge contracts
• A regulatory action against Tools for Humanity results in forced chain shutdown or comparable operational disruption in a jurisdiction material to Ketju clients

The research file

Mechanism

World Chain is an OP Stack Layer 2 built to give priority blockspace to holders of a World ID. Deposits from Ethereum confirm in roughly 12 minutes; canonical withdrawals enforce the standard seven-day optimistic challenge window before funds are claimable on Ethereum. Third-party liquidity bridges offer faster exit at a premium, outside this canonical bridge’s trust model.

Control and governance

World Chain currently holds ”Orange Superchain status” rather than the independent, fully-devolved security council Base reached in March 2026 — it remains under shared Optimism Superchain governance, the same zero-delay 2-of-2 nested multisig documented for OP Mainnet in this registry. That shared-governance framing sounds reassuring, but L2Beat’s direct contract-level discovery data tells a different story specific to World Chain’s current deployment: fewer than five external actors can submit fault-proof challenges, meaning state validation currently runs through a permissioned dispute game rather than the permissionless one that let Base pass L2Beat’s ”walkaway test.” L2Beat’s own risk summary states plainly that funds can be stolen through a malicious code upgrade and that there is no delay on code upgrades, flagged as CRITICAL. A recent contract upgrade was executed by ”Alchemy Multisig 1,” a third-party infrastructure provider holding an operator role, not Tools for Humanity alone — a further, undisclosed-until-checked party in the control chain.

Incident record

No exploit of World Chain’s canonical bridge or OptimismPortal contracts was identified through this review’s 2026-08-17 search cutoff. Separate from bridge-contract security, Tools for Humanity has faced sustained regulatory action over its World ID biometric-verification system: bans or forced data-deletion orders in Kenya (High Court ruling, May 2025), Brazil (ANPD ban, January 2025), Indonesia (suspended May 2025), the Philippines (halt order, October 2025), and a Germany GDPR violation finding, among others. This is organizational and reputational risk for the entity operating the chain, not a bridge-contract finding on its own, but it compounds rather than offsets the contract-level concerns above.

Exit under stress

The standard seven-day challenge window is uniformly applied, same as peer canonical bridges. But given the permissioned challenger set L2Beat identifies, the practical protection that window provides depends on those few permissioned parties acting correctly, not on an open, adversarial market of challengers the way Base’s design intends.

Comparison

Against Base, Arbitrum, and Optimism’s canonical bridges, all approved with limits in this registry, World Chain shares the same nominal Superchain governance lineage but fails on the specific structural facts L2Beat verifies directly: a Stage rating below Stage 0, a permissioned rather than permissionless challenger set, and a CRITICAL-flagged zero-delay upgrade path with no equivalent independent-council decentralization milestone. Shared branding is not the same as shared structure, and this entry is priced on the structure actually observed for this specific chain.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• L2BEAT — World Chain project page · primary · accessed 2026-08-17
  Supports: not even Stage 0, fewer than 5 external challengers, no delay on code upgrades flagged CRITICAL, upgrade history
• Superchain Eco — World Chain chain profile · secondary · accessed 2026-08-17
  Supports: Orange Superchain status
• World Docs — World Chain overview · primary · accessed 2026-08-17
  Supports: chain identity, Superchain infrastructure
• The Defiant — World Chain bridge TVL climbs 33% over seven days · secondary · accessed 2026-08-17
  Supports: deposit and withdrawal timing
• Finance Magnates — Worldcoin ordered to delete biometric data in Kenya over privacy breach · secondary · accessed 2026-08-17
  Supports: Kenya regulatory action

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.