Vault Bridge Token

ChainSecurity8 May 2025Files named in the report

ChainSecurity reviewed Polygon (Vault Bridge Token) on 8 May 2025: 8 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Polygon’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	2
Medium	0	0	3
Low	0	0	3

Marked Informational by the firm. Not counted as findings.

InformationalIncorrect Custom Token Storage SlotFixed

The report gives no description here.

InformationalInitializer Can Be Called DirectlyFixed

The report gives no description here.

InformationalInitializer Uses Outdated NamingFixed

The report gives no description here.

InformationalMissing EventsFixed

The report gives no description here.

InformationalSmall Deposits Into the Yield Vault Are AllowedFixed

The report gives no description here.

InformationalUnused Function ParametersFixed

The report gives no description here.

InformationalVaultBridgeToken Does Not Inherit IBridgeMessageReceiverFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (15)

src/custom-tokens/WETH/WETHNativeConverter.sol
src/custom-tokens/WETH/etc/vault-bridge-tokens/vbETH/VbETH.sol
src/custom-tokens/WETH/WETH.sol
src/custom-tokens/WETH/etc/ERC20PermitUser.sol
src/NativeConverter.sol
src/custom-tokens/GenericNativeConverter.sol
src/CustomToken.sol
src/MigrationManager.sol
src/VaultBridgeToken.sol
src/custom-tokens/WETH/etc/vault-bridge-tokens/GenericVbToken.sol
src/custom-tokens/GenericCustomToken.sol
src/ITransferFeeCalculator.sol
src/VaultBridgeTokenInitializer.sol
src/custom-tokens/WETH/etc/vault-bridge-tokens/vbETH/vbUSDT/TransferFeeUtilsVbUSDT.sol
src/TransferFeeUtils.sol

Part of Polygon’s security record

Polygon

Audits12 audits by 6 firmsLast audit May 2025, by ChainSecurity.

Critical findingsNo open critical findingsAcross the 12 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Polygon’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.