Public contract review

VIGIX smart contract audit.

Non-custodialWallet signedRoute clarity

This page publishes a static engineering review of the public VIGIX smart contract source. It is not a replacement for a full third-party formal audit, but it gives users and reviewers a clear public baseline for how the current Polygon contract behaves.

Network
Polygon Mainnet
Contract
0xea1989dDc9F7db000347F6Ac14C63fd395B6EDAd
Settlement asset
Polygon USDC 0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359
Source reviewed
github.com/VestigeIndex/Vigix.Contract/vigix.sol
Review date
2026-05-10
Reviewed controls
OpenZeppelin ERC20, Ownable, Pausable, ReentrancyGuard and SafeERC20 are used.
The owner cannot arbitrarily mint VIGIX. New supply is minted only through the buy flow.
The sell flow burns VIGIX and checks USDC reserves before returning USDC to the user.
Buy and sell execution include minOut slippage protection controlled by the user interface.
There is no seed phrase, private key, custody, auto-signing or wallet bypass surface in the contract.

Critical

None identified

No direct arbitrary mint, owner drain, private-key, custody or hidden transfer function was identified in the reviewed source.

High

None identified

No high-severity issue was identified in the reviewed source. Buy and sell are protected by nonReentrant and explicit amount checks.

Medium

Operational control

The owner can pause/unpause and update the fee wallet. This does not grant arbitrary reserve withdrawal, but it should remain publicly monitored.

Informational

Documentation alignment

The source does not include a separate sell-activation threshold beyond reserve availability and normal balance checks. Product documentation should not imply an extra hidden threshold.

Limitations

This review covers the public source and application ABI used by Vestige Index. It does not claim bytecode equivalence certification, economic-model assurance, reserve sufficiency guarantees, or legal approval. Users should still verify the official contract address and confirm every action inside their own wallet.