Polygon security review

Sigma Prime1 Feb 2024Code version: not recorded (see the report)

Audit · firm’s term: security assessment

Sigma Prime reviewed Polygon (Polygon security review) on 1 Feb 2024: 11 findings, 0 critical; 5 marked fixed, 6 acknowledged.

No open critical findings

Open the report Open Polygon’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	3	4
Low	0	3	1

MediumAggregator Rewards Are Averaged Across Forced Batches & RollupsAcknowledged

The report gives no description here.

MediumBatch Fees Multiplier Cap Bypassed With Multiple CallsAcknowledged

The report gives no description here.

MediumEmpty Forced Batch Event Will Look Like It Came From An EOAAcknowledged

The report gives no description here.

LowEIP-155 Transactions Are ReplayableAcknowledged

The report gives no description here.

LowLack Of Slippage Protection For SequencerAcknowledged

The report gives no description here.

LowSequencer Can Censor Forced BatchesAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Polygon’s security record

Polygon

Audits12 audits by 6 firmsLast audit May 2025, by ChainSecurity.

Critical findingsNo open critical findingsAcross the 12 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Polygon’s security record

Security firm

Sigma Prime

16 projects reviewed · 37 reports · latest Aug 2026

See Sigma Prime’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.