What are the main risks of using Avalanche?
Using Avalanche means trusting code, bridges and subnets, where a bug or a weak validator set can drain funds. The SEC named AVAX in a 2023 case.
Vahe HakobyanEditor-in-chief
Updated Oct 6, 20263 min readFact-checked
On this page
- Buggy app code on Avalanche can drain user funds.
- A subnet does not inherit mainnet security.
- The SEC alleged in June 2023 that AVAX is a security.
- Staking services add contract and penalty risk.
The risks of using Avalanche are buggy apps, hacked bridges, centralization among validators and subnets, a lawsuit naming AVAX, and locked tokens for stakers.
Avalanche is a smart-contract blockchain that Ava Labs launched in 2020. People use it for trading apps, lending and games.
Where do Avalanche users lose funds?
Most of the technical risk sits in the code built on top of Avalanche, not in the main chain itself. Apps and DeFi protocols on it have failed before.
How does Avalanche work and compare?
Avalanche runs on proof of stake. Validators lock AVAX to confirm blocks, and the network picks them in proportion to their stake.
That concentrates power in the largest holders, so a handful of validators can influence the network. Avalanche also lets groups run their own subnets, and one with few validators is easier to attack than the main network.
Is AVAX regulated as a security?
In June 2023, the SEC named AVAX as an alleged security in its enforcement action against Binance. A complaint is an accusation, not a court ruling.
What are the staking risks on Avalanche?
Staking means locking AVAX with a validator to secure the network. The tokens stay locked for a period.
Avalanche withholds rewards from a validator that misses its duties instead of cutting the staked AVAX itself. Third-party staking services may impose their own penalties and add code that can carry bugs.
Frequently asked questions
A subnet is a separate blockchain that runs alongside Avalanche, with its own validators. It does not inherit the main network's security, so a subnet with few validators is easier to attack.
No. A confirmed transfer is final, and funds sent to the wrong address are usually gone, with no guarantee of recourse.
The rest of the network keeps producing blocks. The offline validator loses rewards and can drop out of the active set, but it keeps its stake.
Yes. Ava Labs pays researchers who report flaws in its code, and the reward depends on the flaw's severity.
