Polygon ZkEVM security review

HexensCode version: not recorded (see the report)

Audit

Hexens reviewed Polygon (Polygon ZkEVM security review) on 27 Feb 2023: 9 findings, 4 critical; all marked fixed.

4 critical findings, fixed
Open the reportOpen Polygon’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical004
High001
Medium001
Low003

Marked Informational by the firm. Not counted as findings.

InformationalCALL DEPTH CHECK MISSINGFixed

The report gives no description here.

InformationalINCORRECT INDEX SIZE IN VERIFYMERKLEPROOFFixed

The report gives no description here.

InformationalLOOP OPTIMISATIONFixed

The report gives no description here.

InformationalPERMUTATION CONSTRAINT DISCREPANCY BETWEEN VERIFYPIL TOOLING AND STARK GENERATIONFixed

The report gives no description here.

InformationalPLOOKUP AND PERMUTATION SELECTOR POLYNOMIAL DISCREPANCY BETWEEN VERIFYPIL TOOLING AND STARK GENERATIONFixed

The report gives no description here.

InformationalREDUNDANT IMPORTSFixed

The report gives no description here.

InformationalREDUNDANT JUMPSFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Polygon’s security record

Polygon
Audits12 audits by 6 firmsLast audit May 2025, by ChainSecurity.
Critical findingsNo open critical findingsAcross the 12 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Polygon’s security record

Security firm

Hexens

32 projects reviewed · 74 reports · latest Jul 2026

See Hexens’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us