Audit Report

Paladin2 addresses on Polygon (POS)

Paladin reviewed Polygon (Audit Report) on 30 Mar 2022: 12 findings, 0 critical; 11 marked fixed, 1 acknowledged.

No open critical findings
Open the reportOpen Polygon’s security record

Report hosted on paladinsec.co.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium000
Low0110
HighThe deposit function will always revert due to a wrongful burnFixed

The report gives no description here.

LowContract contains unused functionalityFixed

The report gives no description here.

Lowdeposit can be made externalFixed

The report gives no description here.

LowEvent emission inconsistencies between recoverWMATIC and recoverLostTokenFixed

The report gives no description here.

LowGovernance Privilege: Pending MATIC rewards could be taken out by the governance preventing users from harvesting themFixed

The report gives no description here.

LowIf a user deposits and immediately harvests in the same block, they would not get their pending rewards up to that epochFixed

The report gives no description here.

LowpendingWMATIC function contains an unnecessary precision multiplierFixed

The report gives no description here.

Lowpermit can be frontrun and cause denial of serviceFixed

The report gives no description here.

LowstartTime can be made immutableFixed

The report gives no description here.

LowTypographical errorsFixed

The report gives no description here.

Show 1 more
LowUnnecessary virtual modifiersFixed

The report gives no description here.

Contracts in scope2

AddressChainSource code
0xa9de045d9e8b619ed12fc4947f10d371621de492Chain: Polygon (POS)Source code: Verified source
0xd9d2114c8ea72298d5748f9684b4aadfec6731a3Chain: Polygon (POS)Source code: Verified source

Part of Polygon’s security record

Polygon
Audits12 audits by 6 firmsLast audit May 2025, by ChainSecurity.
Critical findingsNo open critical findingsAcross the 12 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Polygon’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us