ClayStack
Summary
ClayStack allows users to stake their MATIC on Polygon by aggregating user deposits and withdrawals before bridging them over to Ethereum, where the MATIC is staked via ClayMatic. Users are provided the derivative token csMATIC to later unstake their tokens on Polygon. Generally speaking, the scope of this audit covers the issuance of the csMATIC token in Polygon, the bridging of MATIC from Polygon to Ethereum, and its integration with ClayMatic. ClayMatic, and its staking of MATIC through Polygon's validators, is not in the scope of this audit. The most important issues we found relate to its reliance on outside components. With the complexity of integrating L1 and L2 systems, it is important that the protocol properly validates all inputs and guards against replayability. We found the test coverage to be strong for the Polygon contracts, but could use improvement on the Ethereum side.
