How to choose a TON validator pool: 2026 checklist

Choosing a TON staking pool in 2026 isn’t about who advertises the highest APR. The base validator reward is the same for everyone, and any large marketing-APR difference usually reflects a temporary LP-farming campaign on top of the stake or a new pool aggressively undercutting fees. Once those campaigns end, net APY across Tonstakers, bemo, Hipo and Whales Pool converges to the 3.5–4.2% corridor. The real choice is made on other criteria: how well-protected your capital actually is, how transparent the operator is, and what happens when you want to exit.

This guide is an actionable checklist of 11 criteria. For each: what it means, where to check it, and what counts as a green vs red signal.

2026 context. After the Toncoin → Gram rebrand (June 1, 2026), nothing in staking mechanics changed — the token is renamed, contracts are the same. See the main staking guide.

Why a framework is needed

Typical retail mistake: open a pool’s page, see “APR 4.5%”, click Stake. Six months later — discover the pool lost 2% of stake in a slashing incident, the operator team isn’t responding on Discord, and the LST trades on the DEX at a 3% discount.

A systematic choice across multiple independent criteria protects against this. Below — 11 criteria, sorted by importance.

1. Validator uptime in the pool

What it is. The share of cycles in which the pool’s validators successfully signed all required blocks. A TON cycle is about 18 hours; a miss equals a partial or full reward loss for that cycle.

Where to look.

• tonscan.org — public validator stats with uptime breakdown for the last 100 cycles.
• The operator’s dashboard (larger teams maintain a Grafana board).
• The team’s Telegram channel — monthly reports with hard numbers are common.

Green signal. 98%+ over the last 90 days. Yellow. 95–98%. Red. Below 95%, or no public stats at all.

Whales Pool historically has the best uptime among TON nominator operators. That doesn’t mean other pools are bad — Tonstakers and bemo are both consistently above 97%. But a 1–2% uptime gap directly affects your net APY.

2. Protocol fee

What it is. What share of gross rewards the operator keeps. The TON 2026 standard is 10% of rewards (not of stake).

Where to look. The pool’s docs plus on-chain metrics in the explorer. Don’t trust “effective fee” claims without a formula — ask for the exact computation.

Green. 5–10% of rewards, transparently disclosed. Yellow. 10–15% — acceptable if the operator takes on extra commitments (insurance fund, active governance). Red. Above 15%, or an opaque “base fee + performance fee + withdrawal fee” structure.

Don’t confuse: a 10% fee on rewards at 4% base APR is just 0.4 percentage points of net-APY reduction. That’s a fair price for infrastructure. A hidden withdrawal fee (see criterion 7) is far more dangerous.

3. Slashing history

What it is. Whether the pool has had slashing episodes — penalties for validator misbehaviour (missed signatures, double-signing). Slashing on TON is relatively rare but happens; typical magnitude is 1–3% of the offending validator’s stake.

Where to look.

• tonscan.org → Validators → specific validator → slashing history.
• The team’s Telegram archive (incidents usually get a post-mortem).
• DeFiLlama / TON Foundation reports for larger episodes.

Green. Zero slashing episodes in the past 12 months. Yellow. 1–2 episodes with a public post-mortem and staker compensation from an insurance fund. Red. Slashing happened but the team didn’t explain why, didn’t compensate, or there were more than two episodes.

Slashing isn’t “the protocol is broken” — it’s a signal about operational quality. A team that responds to incidents transparently is better than a team that stays silent.

4. MEV policy

What it is. MEV (maximal extractable value) is extra revenue a validator can extract by reordering transactions in a block. TON’s sharded architecture reduces Ethereum-style MEV (frontrunning, sandwich) but doesn’t remove it entirely.

Where to look. The pool’s docs, “MEV policy” or “Block production policy” section. If no such section exists — ask the team directly via support channels.

Green. Clear declaration: either an explicit opt-out from MEV, or distribution among stakers (MEV rewards added to staking rewards). Yellow. MEV is acknowledged as a revenue source without a clear distribution mechanism. Red. No mention of MEV at all.

Pools with transparent MEV policy don’t necessarily yield more — they yield more trust. And if MEV rewards do flow back to stakers, that’s another 0.1–0.3% to effective APR.

5. Security audit

What it is. Independent review of the pool’s smart contracts by a reputable firm (CertiK, Halborn, Hexens, Quantstamp, Spearbit, Trail of Bits).

Where to look.

• PDF report on the auditor’s site, not just the logo on the pool’s homepage.
• Report date (not older than 12 months from the current contract version).
• Scope: which contracts were audited, which version.
• Severity distribution of findings and confirmation of fixes.

Green. Recent public report from a tier-1 auditor, all critical/high issues fixed. Yellow. Report exists but is older or partial in scope. Red. Only the auditor’s logo, no public report.

Tonstakers — CertiK + Spearbit, reports published. bemo — CertiK, report published. Hipo — Hexens 2025. Whales Pool — internal audit without a public contract-level report; this is a trade-off for the simpler classical model without an LST layer.

6. Governance token and its distribution

What it is. A separate token granting voting power on protocol parameters (fee size, validator selection, treasury allocation).

Where to look.

• The pool’s tokenomics page.
• Distribution between team, investors, community, treasury.
• Vesting schedule (when and how team tokens unlock).

Green. Transparent distribution with no more than 20% to the team, clear 3–4 year vesting. Yellow. 20–40% with team/insiders. Red. Over 40% with the team or opaque vesting.

Tonstakers has the FNZ token. bemo and Hipo are governance-token-free for now. Whales Pool is tokenless by design (classical model). No token isn’t a minus — it’s a different model. Having a token only becomes a minus with poor distribution.

7. Withdrawal time and exit options

What it is. How long, and through which mechanisms, can you get your stake back.

Where to look. The pool’s docs, Unstake / Withdraw section. Best: run a test cycle with a small amount (5–10 Gram).

Green. Instant DEX exit (for LST tokens: tsTON, stTON, hTON) with a discount no worse than 0.5%, plus a standard unstake cycle of 24–36 hours. Yellow. Only an unstake cycle of 24–36 hours, no DEX exit. Red. Withdrawal fee above 0.5%, queue longer than 48 hours, or unpredictable exit time.

This is the criterion with the largest split between models. LSTs (Tonstakers, bemo, Hipo) provide instant exits via swap. Whales Pool — only through the epoch queue. In a crisis the difference can cost a meaningful portion of your stake.

8. TVL and validator distribution

What it is. Total stake in the pool (Total Value Locked) and the number of distinct validators across which that stake is split.

Where to look.

• DeFiLlama — TVL in USD.
• tonscan.org — the pool’s validator list and per-validator stakes.

Green. TVL $50M+ and 8+ validators with roughly equal weights. Yellow. TVL $10–50M, or fewer than 5 validators. Red. TVL under $10M, or a single validator holding more than 50% of the pool.

Large TVL means more validators in the pool, which reduces the impact of any single slashing event. If slashing took 2% of one validator’s stake out of 10 with equal weights, your loss is 0.2%. With only 2 validators, your loss is 1%.

9. LST liquidity on DEXes

What it is. For liquid-staking pools — how deep their derivative token trades on TON DEXes (STON.fi, DeDust).

Where to look.

• STON.fi and DeDust — pool depth for tsTON/TON, stTON/TON, hTON/TON.
• DeFiLlama → DEXes → specific pair.

Green. Pool depth at least $5M, average daily volume $500K+, LST discount to base no worse than 0.5%. Yellow. Depth $1–5M, discount 0.5–1.5%. Red. Depth under $1M, or persistent discount above 2%.

This criterion strongly affects exit strategy. If the LST trades at a 2% discount, an instant DEX exit costs you 2% of stake — more than two months of post-fee staking rewards. In that case waiting for the unstake cycle is cheaper.

10. Team transparency

What it is. Who’s behind the pool, whether names are public, how long the team has been in the TON ecosystem.

Where to look.

• Pool’s Team / About page.
• LinkedIn / Twitter / Telegram for the operators.
• History of public talks at TON conferences.

Green. Team is known, operators publish under real names, with 2+ years of work in the TON ecosystem. Yellow. Semi-anonymous team using pseudonyms but active in public TON channels. Red. Fully anonymous team with no footprint in the ecosystem.

TON has historically been more tolerant of semi-anonymity than Ethereum, but large stake should go to teams with a public reputation. Tonstakers, Whales Pool, bemo — all teams with history. Newer pools without a public team may be fine technically, but this is a real risk for large capital.

11. Tax transparency

What it is. How easy or hard it is to document staking income for the tax return in your jurisdiction.

Where to look.

• Pool docs, Tax / Reporting section (not all have it).
• Reward distribution model: discrete TON payouts vs LST rebase.

Green. Classical model (Whales Pool): rewards arrive as discrete TON transactions, each = one line in the return. Yellow. Liquid staking (Tonstakers, bemo, Hipo): the LST balance doesn’t change, but conversion rate rises. Recognition typically happens on conversion to fiat or another asset — but interpretations vary by jurisdiction. Red. Complex hybrid schemes with governance-token airdrops on top of staking rewards, without clear accounting rules.

For non-US/EU holders consult a local tax advisor — staking income classification is still evolving in many jurisdictions in 2026.

Applying the checklist to the four leading pools

This isn’t a head-to-head ranking — it’s a demonstration of how to apply the framework. Use the table as an example, not a final verdict.

A detailed three-way comparison of the largest LSTs — in our companion piece.

Pre-stake final checklist

• Checked validator uptime over 90 days on tonscan.org (norm 97%+).
• Read the PDF audit report from an independent firm (CertiK, Halborn, Hexens, Spearbit, Quantstamp).
• Confirmed protocol fee is no higher than 10% of rewards with no hidden withdrawal fees.
• Located the MEV policy in docs or asked the team directly.
• Reviewed slashing history — whether it happened, how the team responded, whether an insurance fund exists.
• For LST: checked pool depth on STON.fi and DeDust, LST discount to base rate.
• Ran a test stake/unstake with 5–10 Gram, completed the full cycle.
• Understood the tax footprint of the chosen model for my jurisdiction.
• Decided whether a governance token matters (if yes, verified vesting and distribution).
• Didn’t put all stake in one pool — diversified across 2–3 protocols.
• Stored seed in cold storage, not on the device used for staking.

When the checklist says “don’t stake”

Seriously: if a pool is in the red zone on 3+ criteria, don’t stake — even if APR looks attractive. The base TON rate is the same for everyone; large marketing differences are either temporary campaigns or red flags.

Alternatives:

• Go with a leader. Tonstakers and Whales Pool are two established options without serious red flags.
• Wait. If a new pool looks interesting, give it 6–12 months of public history.
• Solo validator. With 300k+ Gram, running your own validator gives maximum control at the cost of OPEX and operational risk.

Related reading

• Staking on TON 2026: ultimate guide
• Whales Pool vs Tonstakers comparison
• bemo and stTON: protocol comparison
• Hipo and hTON: liquid staking
• How to become a TON validator
• Where to find TON validator data