Islamic Finance Principles Assessment
Riba — Does Hacken involve interest?
Hacken's core business generates fee-for-service revenue from audits, bug bounties, and subscriptions, none of which are interest-based. No evidence surfaces of native lending, borrowing, or interest-bearing treasury products tied to HAI itself. For most Muslim investors, the riba profile appears low-risk, though the absence of explicit treasury disclosure leaves a residual gap.
Assessment: Moderate Riba
Score: 52.9/100
Our methodology examines 10 criteria to evaluate how well Hacken avoids interest-based mechanisms.
Hacken's revenue derives from cybersecurity services: smart-contract audits, the HackenProof bug-bounty marketplace, subscriptions, and the HackIT conference, with one source citing a "$9 million revenue" figure tied to the token's ETD mechanism. This is a fee-for-service, real-economy model rather than a yield-farming or lending operation. No source describes HAI or its base ecosystem offering interest-bearing accounts, margin lending, or debt instruments. The lending-related material in the wider source set concerns third-party protocols that Hacken audits or writes about, not products Hacken itself operates, which meaningfully separates the token's issuer from riba-based income streams.
A staking mechanism exists, confirmed by CertiK's project profile and a dedicated 2022 security report (9.1/10, one medium-severity issue, no critical findings) for a Hacken staking contract. However, sources do not specify whether rewards are fixed or variable, what funds them (protocol revenue versus token emission), lock-up terms, or slashing conditions. The "Trust Army" contributor rewards are described as enabling "stable income" through research activity, implying contribution-based, variable earning rather than a guaranteed fixed return, which leans toward permissibility, but the precise mechanics remain undisclosed and cannot be fully verified as riba-free.
Gharar — How much uncertainty does Hacken involve?
Hacken carries moderate uncertainty: the founding team and business are unusually well-documented for a crypto project, but the token's own contract audit status, tokenomics detail, and staking mechanics are thinly sourced. This asymmetry between corporate transparency and token-specific disclosure is the defining gharar issue. Overall, the uncertainty is manageable but non-trivial and warrants caution before committing capital.
Assessment: Excessive Gharar (High Uncertainty)
Score: 49.7/100
Our methodology examines 15 criteria including team transparency, audit quality, and governance.
Transparency at the corporate level is strong: founders Dmitriy Budorin (CEO, ACCA, ex-Deloitte) and Yevheniia Broshevan (Forbes 30 Under 30, Stanford GSB) are named and independently verifiable, alongside CTO Andrii Matiukhin and several advisors. Hacken has operated since 2017, employs 150+ staff, and claims relationships with the European Commission, ADGM, MetaMask, and the Ethereum Foundation. This is not an anonymous team. However, sources do not confirm whether the HAI token contract itself is open-source, nor do they detail team/investor allocation percentages or vesting schedules for the token, leaving a disclosure gap specific to the asset rather than the company.
Documentation quality is mixed. A staking smart contract received a security report dated 08.06.2022 scoring 9.1/10 with one medium-severity issue and no critical findings, but the auditing firm's name is not clearly identified in available material. No audit of the HAI/HKN token contract itself, nor of any treasury or reserve backing the token, is identified in these sources. This absence of a clearly attributed, comprehensive audit for the token and treasury is a genuine gharar concern and should be named plainly: investors relying on token-level security assurances currently have incomplete information to do so.
Maysir — Does Hacken involve gambling or speculation?
Hacken is not designed as a gambling instrument; its stated purpose is cybersecurity auditing, bug bounties, and utility payments within that ecosystem. Genuine productive use distinguishes it from purely speculative tokens, though thin secondary-market liquidity introduces its own volatility risk. The overall maysir profile is favorable at the design level but tempered by market conditions.
Assessment: Moderate Maysir (High Risk)
Score: 57.9/100
Our methodology examines 11 criteria to determine whether Hacken is a gambling instrument or a genuine economic tool.
HAI has clear, demonstrable utility beyond price speculation: it discounts HackenAI subscription payments, purchases "ETD" units representing the auditing team's billable time, and, through the Brickken partnership, can convert into tokenized Hacken Equity Shares carrying dividend and governance rights. Governance participation occurs through a community DAO structure ("hDAO"). This work-to-earn and product-utility design ties token value to real service consumption and business performance rather than to a zero-sum betting mechanism, which is the central factor separating it from maysir-type instruments.
Against this genuine utility, market data shows thin and volatile trading: CoinGecko reports roughly $55,969 in 24-hour volume, down 45% day-on-day, indicating a small, illiquid secondary market prone to sharp price swings. Such volatility can attract short-term speculative trading independent of the token's underlying utility. This third-party trading behavior, however, is a feature of any thinly traded asset and does not reflect the token's own design; Hacken's protocol itself is structured around service consumption and governance rather than speculative payoff mechanics.
The Full 27-Point Screening
1. Legitimacy (4 criteria)
| Criterion | Score | Analysis |
|---|
| Team Transparency | 85/100 | The founding and current team members are publicly named with verifiable credentials and long professional histories. |
| Fraud & Scam Risk | 78/100 | Sources show a long, continuously-operating business trusted by major institutions with no fraud, hack, or rug-pull indicators reported. |
| Use Case Legitimacy | 85/100 | The company provides documented real-world cybersecurity auditing and bug-bounty services used by over a thousand projects. |
| Ethical Practices | 85/100 | The core business is cybersecurity/blockchain auditing, a sector with no inherent Shariah concern. |
Summary: Hacken's founding team is fully named, credentialed and long-tenured with no fraud or regulatory-action indicators found in the sources, marking it as a genuine cybersecurity business rather than a meme coin.
2. Project Operations (9 criteria)
| Criterion | Score | Analysis |
|---|
| Core Protocol Business | 82/100 | The base business (auditing, bug bounty, exchange ranking) sits in a non-prohibited sector. |
| Transaction Fees | 45/100 | A deflationary mechanism tied to ETD service purchases is mentioned, but the full fee-handling mechanics are not detailed. |
| Treasury Assets | 30/100 (low evidence) | Treasury composition and holdings are not described in the sources. |
| Revenue Model | 72/100 | Revenue is generated from fee-for-service auditing, subscriptions, and bug-bounty operations rather than interest-based activity. |
| Transparency | 50/100 | Whitepapers and some documentation are public, but open-source status and full disclosure of code/operations are not confirmed. |
| Governance | 45/100 | A community DAO (hDAO) and voting exist, but the degree of real decentralisation versus company control is unclear. |
| Launch Fairness | 35/100 (low evidence) | The original 2017 token sale is mentioned but no launch-fairness or insider-allocation details are given. |
| Token Distribution | 30/100 (low evidence) | No breakdown of HAI/HKN's own team/investor/community token distribution is found in these sources. |
| Speculation/Utility Ratio | 55/100 | Multiple stated utility use-cases suggest a utility orientation, but thin/volatile trading volume and lack of quantified usage data leave the ratio uncertain. |
Summary: The base entity runs legitimate security-auditing, bug-bounty and exchange-ranking services with an HAI utility/governance token, though detailed fee-burn mechanics, treasury composition, token distribution and launch-fairness specifics for HAI itself are not disclosed in the sources.
3. Financial Health (4 criteria)
| Criterion | Score | Analysis |
|---|
| Protocol Revenue | 75/100 | Revenue derives from audits, subscriptions and bug-bounty fees, with no interest-based source identified. |
| Financial Status | 45/100 | A revenue-generating business is referenced, but current market data shows thin and declining trading volume, limiting confidence in financial stability. |
| Interest Assessment | 80/100 | No lending or borrowing function is described at the token or ecosystem level; the lending material in the sources concerns unrelated third-party protocols. |
| Audit Quality | 40/100 | A staking-contract security report with a good score exists, but the auditing firm's identity is unclear and no audit of the token contract itself was found. |
Summary: Hacken earns fee-based service revenue with no lending/borrowing built into the token or ecosystem, but current trading liquidity appears thin, and while a staking-contract security report exists, no clearly-named audit of the HAI token contract or its treasury could be found.
4. Token Economics (5 criteria)
| Criterion | Score | Analysis |
|---|
| Token Purpose | 80/100 | The token is explicitly positioned with multiple concrete utility and governance use-cases rather than as a speculative meme asset. |
| Governance Rights | 70/100 | Community voting and a DAO structure (hDAO) providing holder governance are described. |
| Rewards Distribution | 55/100 | Rewards are described as contribution-based "stable income" via research activity, implying variability, but the exact formula is not detailed. |
| Speculation Controls | 30/100 (low evidence) | No specific anti-speculation mechanisms (vesting limits, sell restrictions, etc.) for the token are described. |
| Asset Backing | 45/100 | The token is backed by ongoing business utility and an equity-conversion option rather than a defined reserve of halal assets. |
Summary: HAI is presented across sources as a functional utility and governance token with concrete use cases (subscription payment, service-time purchases, equity conversion, DAO voting) rather than a purely speculative meme asset, though explicit anti-speculation design and asset-backing detail are largely absent.
5. Staking Mechanism (5 criteria)
| Criterion | Score | Analysis |
|---|
| Mechanism Type | 40/100 | A staking contract exists and passed a security review, but custody model, lock-up terms, and delegation structure are not described. |
| Islamic Contract Classification | 20/100 (low evidence) | No Islamic contract classification (e.g., Mudarabah/Wakalah) for the staking mechanism is discussed in the sources. |
| Rewards Structure | 25/100 (low evidence) | Whether staking rewards are fixed or variable, and their funding source, is not established in the sources. |
| Documentation | 40/100 | A security audit report provides some documentation, but full terms and risk disclosures for stakers are not found. |
| Shariah Alignment | 25/100 (low evidence) | Insufficient information exists to assess gharar or overall Shariah alignment of the staking mechanism. |
Summary: A native staking mechanism is confirmed to exist and has passed a security review, but the sources do not describe its custodial status, lock-up terms, reward funding source, or Islamic contract classification in enough depth to assess its Shariah standing.
Overall Assessment: Hacken/HAI reads as a legitimate, long-operating cybersecurity business with a genuine utility token, but several tokenomics, treasury, audit-naming and staking-mechanism details needed for a full Shariah assessment are not established in the available sources.
Written by ThanvirFounder, Ex Director S&P Global Energy
Reviewed by Imam Omar SiddiqiShariah Scholar