Critical
None identifiedNo direct arbitrary mint, owner drain, private-key, custody or hidden transfer function was identified in the reviewed source.
Public contract review
This page publishes a static engineering review of the public VIGIX smart contract source. It is not a replacement for a full third-party formal audit, but it gives users and reviewers a clear public baseline for how the current Polygon contract behaves.
No direct arbitrary mint, owner drain, private-key, custody or hidden transfer function was identified in the reviewed source.
No high-severity issue was identified in the reviewed source. Buy and sell are protected by nonReentrant and explicit amount checks.
The owner can pause/unpause and update the fee wallet. This does not grant arbitrary reserve withdrawal, but it should remain publicly monitored.
The source does not include a separate sell-activation threshold beyond reserve availability and normal balance checks. Product documentation should not imply an extra hidden threshold.
This review covers the public source and application ABI used by Vestige Index. It does not claim bytecode equivalence certification, economic-model assurance, reserve sufficiency guarantees, or legal approval. Users should still verify the official contract address and confirm every action inside their own wallet.