Is IOST safe? An honest risk check for holders

The short answer

IOST is real, and it is risky. The chain has produced blocks since the mainnet launch on 25 February 2019, the node software is open source and regulated exchanges in Japan and South Korea still list the token. That rules out the worst fear behind searches like “IOST scam”. But a working chain is not the same as a safe investment. The price sits more than 99% below its January 2018 high, set a new all-time low in August 2026, and supply has more than doubled compared with the 21 billion tokens at genesis.

So the honest answer splits in two. Technically, holding IOST on a regulated exchange or in a wallet you control is about as safe as holding any other mid-sized token, as long as you avoid the scams described below. Financially, IOST carries more risk than most coins that people buy on Japanese and Korean exchanges, for reasons you can check yourself. This page walks through each one with the source behind it.

Is IOST a scam or dead?

Neither, strictly speaking. A scam token usually has no working product, anonymous issuers and a contract that lets insiders drain holders. IOST has a public foundation in Singapore, a mainnet that has processed over a billion transactions according to its explorer, and listings on exchanges that answer to Japan’s FSA and Korea’s regulators. In October 2026 every block producer upgraded to go-iost v4.0.0, which a dead project would not bother to do.

“Alive” is a low bar, though. The L1 handles a couple of transactions per second on a normal day, mostly block rewards, and the official explorer counted only around a hundred active users in a recent 24-hour window. The IOST 3.0 Layer 2 on BNB Chain is live, yet our research sampling across its whole history found no user transactions at all. The project’s website also advertises far more active accounts than the explorer counts, so treat marketing numbers with care. For the full story of what IOST is and how it got here, see what IOST is.

Project and supply risk

The biggest long-term risk is dilution. IOST launched with 21 billion tokens. The mainnet’s token API now reports about 32.6 billion on the L1, more than the documented 2% yearly issuance would produce, and the official docs disagree with each other about the inflation rule: one page says 2% a year, another describes an annual halving. Then, for IOST 3.0, a governance vote approved about 21.32 billion new IOST on BNB Chain. Those tokens vest over three to five years for validator rewards, airdrops, community incentives, grants, a DAO and the team. Max supply is 90 billion.

New tokens need new buyers, and that is the core problem. Burns exist, such as the 70 million legacy-token burn in September 2026 and the protocol burn of RAM purchase fees, but they are small compared with the scheduled issuance. Roadmap promises have also slipped: the 2024 proposal targeted more than $1 billion in real-world assets on-chain by the end of 2025, and no such volume is visible. Our IOST tokenomics page breaks down every supply figure, and the IOST 3.0 explainer covers what the Layer 2 really does.

Who holds IOST

According to the IOSTSCAN rich list, the top 10 L1 accounts hold about 72% of the L1 supply, and the top 100 hold almost 97%. The single largest account, dunamuiost, belongs to Dunamu, the operator of Upbit, and holds roughly 30%. The second-largest holds about a quarter and is unlabelled. Most big balances are exchange custody wallets, so this is not one whale who can dump everything. It does mean a large share of IOST belongs to Korean retail traders on a single platform, and that any policy change at that exchange would hit the market hard.

Concentration also explains the violent price spikes. When most tokens sit in a few places and order books outside Binance and Upbit are thin, a burst of buying can triple the price in a day. In September and October 2026 that is exactly what happened, and both spikes retraced within days. The IOST price prediction page explains why those moves look like pump-and-dump trading rather than new demand.

Exchange cautions and delistings

Searches for “IOST delisting” and “IOST 上場廃止” usually trace back to two events. The first is Korea. On 13 January 2025, Upbit published a caution notice through DAXA, the alliance of Korean won exchanges, after IOST announced its Layer 2 move and 21.32 billion new tokens. That was a caution call, the mildest step in DAXA’s process. IOST was not designated a warning asset after it and was not delisted, and Upbit still lists both KRW-IOST and BTC-IOST with no warning flag. The only earlier flag came in November 2019, when Upbit briefly designated IOST a caution asset after node instability halted deposits. Read our Upbit review for how that exchange handles IOST.

The second is Japan. Two smaller Japanese exchanges did drop IOST: CoinTrade on 8 July 2026 and the former BITPOINT system, now part of SBI VC Trade, on 5 August 2026. Four FSA-registered exchanges still handle it: Coincheck, OKJ, BitTrade and Binance Japan. IOST also remains on the JVCEA green list of commonly handled assets. If you are in Japan, those registered exchanges are the honest choice; the IOST in Japan page compares them.

Exchange risk also includes airdrop handling and token side projects. In 2021 Coincheck declined to support the DON airdrop for IOST holders because DON’s liquidity and technical safety were unconfirmed, and DON has since been delisted on Upbit. A cautious exchange is a feature, not a bug.

Prefer to start with a stablecoin?

Some readers outside Japan buy crypto first. CEX.IO, running since 2013, sells crypto such as BNB by card; it doesn’t list IOST and it doesn’t serve Japan, so you would move crypto to an exchange that lists IOST. Its Asian users contract with a Nevis entity that holds no Asian licence.

Grab crypto, then IOST

Technical risk: forks and pauses

IOST’s chain has been stable in recent years, but upgrades come with friction. The go-iost v4.0.0 release on 14 October 2026 was mandatory and backward-incompatible, announced to the community on 19 October. Exchanges had to upgrade their nodes, and Upbit paused IOST deposits and withdrawals from 21 October until they resumed by 26 October, while trading continued. Other exchanges paused around the same days. If you planned to move IOST that week, you simply had to wait.

There have been rougher moments. In December 2023 a wave of inscription spam congested the chain, and the team shipped emergency releases that prioritized native transfers and temporarily hard-limited throughput. In November 2019, node instability stopped Upbit deposits and led to the brief Upbit designation mentioned above. None of these caused a known loss of user funds, but they show why you should never move IOST in a hurry around an upgrade. Check exchange notices first, and use the IOST explorer to confirm a transfer reached IRREVERSIBLE status.

Fake tokens, airdrops and phishing

This is where most IOST holders actually lose money. The project itself publishes a list of official surfaces on its security page: iost.io, iostscan.com, l2-scan.iost.io, iostbridge.com and l2-bridge.iost.io, plus the official X, Telegram, Facebook, LinkedIn and Medium accounts. Anything else is unofficial by default, and the page warns that even a link from an official site does not make a third-party system official.

Fake IOST tokens

The IOSTSCAN token list contains many spam tokens with names like iiost2, iost_ and fakeiost. On the mainnet, the real token is simply iost. On BNB Chain, the only official BEP-20 contract is 0xAf48B7e315a52518CfBF7d96C455D9dFAD94cB48. The old ERC-20 token from 2018 was swapped at mainnet launch, and other bridged versions are unofficial. Sending the wrong network to an exchange is another common loss; the guide to sending IOST explains memos and network choice.

Fake airdrops and “migration” pages

The IOST 3.0 airdrop is real, which makes it perfect bait. The only official claim page for mainnet holders is iost.io/airdrop, and exchange users get payouts automatically. There is no mandatory “swap to IOST 3.0”: L1 IOST still works, and bridging is optional. Look-alike domains, “send IOST to receive double” giveaways and pages asking you to approve a token or type your seed phrase are all scams. Our IOST airdrop guide lists the real schedules.

Phishing Ledger pages and wallet scams

There is no native Ledger app for mainnet IOST. You can hold BEP-20 IOST on a Ledger through its BNB Chain support, but searches for “Ledger IOST” surface many phishing “Ledger Live” pages hosted on free site builders. Other traps: Telegram “admins” who message you first (real admins never DM first), “IOST cloud mining” apps (IOST cannot be mined) and resale pitches for Signet ring “nodes”. The IOST wallet guide lists the wallets that actually support each network.

Real admins never DM first!

Your key is the whole account

On IOST, whoever has the private key controls the account. No airdrop, support agent or migration ever needs it. Type it only into your own wallet.

Self-protection checklist

Most IOST losses come from a handful of avoidable mistakes. Run through this list before every move, especially around upgrades and airdrop dates.

Is IOST a good investment?

We can’t answer that for you, and anyone who does without knowing your situation is guessing. What we can do is lay out the case on both sides. In favor: a loyal Asian community, regulated listings in Japan and Korea, an L1 that still gets maintained, a $21 million strategic round in June 2025 and a stated plan for real-world asset infrastructure. Against: a long and steep price decline, heavy ongoing issuance, almost no measurable use of the new Layer 2, concentrated holdings and short-lived pumps that punish late buyers.

If you are weighing IOST, compare it with the alternatives on the same exchange, check the live market on the IOST price page, and decide in advance what would make you sell. If you want to earn on holdings, read the risks in our IOST staking guide first, because lockups and exchange terms add their own layer. And pick your venue carefully with the IOST exchange comparison.