Vault Bridge Token

ChainSecurity8 May 2025Files named in the report

ChainSecurity reviewed Polygon (Vault Bridge Token) on 8 May 2025: 8 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Polygon’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	2
Medium	0	0	3
Low	0	0	3

HighdrainVault Locks AssetsFixed

The report gives no description here.

HighWETH and WETHNativeConverter Can Be ReinitializedFixed

The report gives no description here.

MediumdrainVault Cannot Withdraw All AssetsFixed

The report gives no description here.

MediumIncorrect Nonmigratable Backing Check in WETHNativeConverterFixed

The report gives no description here.

MediumMissing Asset-Share Conversions in VaultsFixed

The report gives no description here.

LowMissing Revert With Unsupported CustomCrossNetworkInstruction in VbETHFixed

The report gives no description here.

LowNo Nonmigratable Backing for WETHFixed

The report gives no description here.

LowonMessageReceived May Be Called Before claimAssetsFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (15)

src/custom-tokens/WETH/WETHNativeConverter.sol
src/custom-tokens/WETH/etc/vault-bridge-tokens/vbETH/VbETH.sol
src/custom-tokens/WETH/WETH.sol
src/custom-tokens/WETH/etc/ERC20PermitUser.sol
src/NativeConverter.sol
src/custom-tokens/GenericNativeConverter.sol
src/CustomToken.sol
src/MigrationManager.sol
src/VaultBridgeToken.sol
src/custom-tokens/WETH/etc/vault-bridge-tokens/GenericVbToken.sol
src/custom-tokens/GenericCustomToken.sol
src/ITransferFeeCalculator.sol
src/VaultBridgeTokenInitializer.sol
src/custom-tokens/WETH/etc/vault-bridge-tokens/vbETH/vbUSDT/TransferFeeUtilsVbUSDT.sol
src/TransferFeeUtils.sol

Part of Polygon’s security record

Polygon

Audits12 audits by 6 firmsLast audit May 2025, by ChainSecurity.

Critical findingsNo open critical findingsAcross the 12 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Polygon’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.