Two risks have emerged recently in my mind.
  1. SHA256 ASIC manufacturing is too centralized and can be secretly dominated by a monied/state interest
  2. Bitcoin POW power usage is too low, less than 10TW, and can be easily outpaced by a covert state program with a small distributed array of nuclear reactors.