Polygonid security review

Nethermind Security13 Sep 2023Code version: not recorded (see the report)

Audit · firm’s term: security review

Nethermind Security reviewed Polygon (Polygonid security review) on 13 Sep 2023: 9 findings, 0 critical; 5 marked fixed, 4 acknowledged.

No open critical findings

Open the report Open Polygon’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	1	0
Low	0	3	5

Marked Best Practices or Info by the firm. Not counted as findings.

Best PracticesChange names of int256ToAddress(...) and int256ToBytes(...)Fixed

The report gives no description here.

Best PracticesChecks-effects-interactions pattern is not applied on transitState(...) functionFixed

The report gives no description here.

Best PracticesIdentityBase.sol contract can be deployed in its current stateFixed

The report gives no description here.

InfoIncorrect nat-spec documentationFixed

The report gives no description here.

Best PracticesMapping variable name does not match with documentationFixed

The report gives no description here.

Best PracticestransitStateGeneric(...) calls itself externallyFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Polygon’s security record

Polygon

Audits12 audits by 6 firmsLast audit May 2025, by ChainSecurity.

Critical findingsNo open critical findingsAcross the 12 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Polygon’s security record

Security firm

Nethermind Security

57 projects reviewed · 81 reports · latest Sep 2026

See Nethermind Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.