Summary
The most critical subjects covered in our audit are functional correctness, access control, and signature handling.
The contracts show a high level of functional correctness and handle signatures correctly. The general subjects covered are code complexity and gas efficiency. The code maintains an adequate level of complexity. Gas efficiency is good but could be improved in some cases.
In summary, we find that the current codebase provides a high level of security.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don’t replace other vital measures to secure a project.
About Polymarket Exchange Smart Contracts
Polymarket implements a prediction market for real-life events. This audit covers the governance and exchange part of the protocol.
“Polymarket is an information markets platform that lets you trade on the world’s most highly-debated topics (e.g. coronavirus, politics, current events, etc). On Polymarket, you build a portfolio based on your forecasts and earn a return if you are right. When you decide to buy shares in a market, you are weighing in with your own knowledge, research, and view of the future. Market prices reflect what traders think are the odds of future events, turning trading activity into actionable insights that help people make better decisions. As a result, Polymarket is a leading source of unbiased and real-time data about future events.”
Source: https://docs.polymarket.com/faq/general#what-is-polymarket
Hats off to the ChainSecurity team for their stellar work on our security audit. The process was smooth from start to finish thanks to their clear communication style, and our codebase benefited immensely from their thorough analysis. We look forward to working with them in the future!
Mike Shrieve - Protocol Lead