Reza Arap Oktovian
Polygon, a prominent scaling solution for the Ethereum blockchain, has found itself at the center of a significant security debate, stemming from accusations of lax oversight of its core smart contract multisignature (multisig) wallet. Justin Bons, Founder and CIO of Cyber Capital, has publicly voiced concerns, asserting that the current security architecture poses a substantial risk to the over $5 billion in user funds managed on the network. The controversy highlights the ongoing tension between the need for rapid development and the paramount importance of robust decentralization and security in the cryptocurrency space.
At its core, Polygon operates as a "sidechain" to Ethereum, offering users faster transaction speeds and significantly lower fees compared to transacting directly on the Ethereum mainnet. Its compatibility with the Ethereum Virtual Machine (EVM) has made it a popular choice for decentralized applications (dApps) and users seeking a more accessible entry point into the Web3 ecosystem. Beyond its sidechain functionality, the Polygon team has also made substantial investments in pure Layer-2 scaling solutions, including the development of Miden, a zk-STARKs-based scaling solution, signaling a broader commitment to advancing blockchain scalability.
However, with great success and the accumulation of substantial user assets comes the inherent responsibility to ensure the highest levels of security. It is this responsibility that Justin Bons claims Polygon is currently failing to adequately uphold.
The Accusations: A Centralized Achilles’ Heel?
The crux of Bons’s argument lies in the control of the Polygon smart contract admin key. This key, according to Bons, is governed by a five-out-of-eight multisignature contract. In a series of tweets on February 12, 2022, Bons articulated his grave concerns: "Polygon in its current state is insecure & centralized! It would only take 5 people to compromise over $5B! 4 of those people are the founders of Poly! This is one of the largest hacks or exit scams just waiting to happen. Reckless & irresponsible, a warning to the wise."
Bons elaborated on the implications of this multisig configuration, stating, "The Polygon smart contract admin key is controlled by a five out of eight multi-signature contract. This means that the Polygon [team] can gain complete control over Polygon with only one of the four outside parties conspiring. The other four parties in the multisig were also selected by Polygon." This assertion suggests a scenario where a relatively small group, potentially including the Polygon founders and a few selected external parties, could wield immense power over the network’s core functionalities and, by extension, the assets locked within it.
The power vested in the admin key is substantial. It grants the ability to alter network rules and parameters, opening the door to a wide range of potential exploits, including the emptying of the entire Polygon contract. Bons characterized this setup as a significant vulnerability, an "exit scam just waiting to happen," due to the perceived lack of independent oversight and the potential for collusion among a limited number of signatories.
A History of Transparency Concerns
This is not the first time Polygon has faced scrutiny regarding its transparency and governance mechanisms. Chris Blec of DeFi Watch had previously lodged a formal request with the Polygon team seeking greater clarity on their operational procedures and security protocols. According to both Bons and Blec, this request reportedly went unanswered by Polygon, further fueling concerns about the project’s openness. Such a lack of response, if accurate, would naturally lead to increased suspicion within the community, particularly when substantial financial assets are at stake.
Polygon’s Response: Acknowledgment and Evolution
The Polygon team, however, has not remained entirely silent on the matter, especially as similar questions have arisen in the past. In an effort to address community concerns, Polygon had previously published a multisig transparency report, aiming to shed light on the operational mechanics of their key management systems.
In a direct response to Bons’s critical tweets, Mihailo Bjelic, a co-founder of Polygon, indirectly acknowledged the validity of some of the concerns. Bjelic stated that the Polygon team is actively "working towards removing them" referring to the multisigs. He explained that the multisig was implemented during an "early phase" of development, a common practice in the industry. Bjelic defended the use of multisigs, arguing that they are "considered the optimal approach to secure user funds in the early phases of development and are used by almost every scaling and bridging project."
Bjelic’s thread, posted on February 14, 2022, aimed to provide a comprehensive overview of Polygon’s approach to multisigs. He reiterated that the primary purpose of these mechanisms is to "increase security, not to decrease it," and emphasized that Polygon was "responsibly using them." He also pointed to the aforementioned transparency report as evidence of their "plan to improve and eventually remove multisigs."
Addressing the "Exit Scam" Narrative
Bjelic directly addressed the concern of an "exit scam," dismissing it as an "unrealistic concern for Polygon." He argued that multisigs are employed to protect users from external hacks, and that Polygon’s implementation was a responsible measure, contrary to Bons’s accusations.
The debate then circled back to the specific configuration of the five-out-of-eight multisig. Bons had criticized it as "wholly insufficient" for safeguarding $5 billion, highlighting the potential for collusion when four of the eight multisig holders were selected by Polygon itself.
Bjelic countered this point by stating that the external parties involved in the multisig are "reputable Ethereum/Polygon projects and were not selected by Polygon, they decided to participate." He also presented a nuanced view on the number of signers, explaining that while more signers generally enhance decentralization, they can also hinder swift action in critical situations. "The more signers, the harder it is to coordinate them in case an immediate reaction is required," Bjelic noted. "We are trying to find the right balance here; we already have more signers than most of the other scaling projects."
Proposed Solutions and Future Direction
Beyond his critique, Justin Bons also offered concrete suggestions for Polygon’s future development. He advocated for a significant decentralization of Polygon’s governance, proposing that control should be transferred to the holders of the MATIC token. Currently, Polygon operates on a Delegated Proof of Stake (DPoS) model with a relatively small number of validators. Data from Polygonscan, a block explorer for the Polygon network, indicated that in the seven days preceding Bons’s critique, a mere four validators had mined a majority of the blocks. This concentration of power, Bons argued, represented a significant centralization risk.
Bons’s proposed roadmap involved two key steps: first, decentralizing governance based on MATIC token holders, and second, transferring the smart contract admin key to this decentralized entity, effectively establishing a "MATIC DAO." This would necessitate a migration to a new Polygon smart contract, a process Bons acknowledged would be "very difficult and costly." However, he framed it as the necessary "price to pay for not doing things right, to begin with" and the cost of achieving true decentralization and security, which he believes is the fundamental ethos of cryptocurrency.
Mihailo Bjelic acknowledged the long-term vision presented by Bons, stating that such decentralization is "definitely our goal, as described in the transparency report." However, he reiterated the practical challenges, particularly regarding the potential increase in reaction time during critical events or bug fixes. Consequently, Bjelic indicated that this transition would be implemented and activated "gradually."
Broader Implications for the Blockchain Ecosystem
The controversy surrounding Polygon’s multisig security is emblematic of a larger, ongoing challenge within the blockchain industry: the delicate balance between innovation, scalability, and decentralization. As projects like Polygon attract substantial capital and user bases, the responsibility to maintain robust security and transparent governance becomes increasingly critical.
The accusations, while strongly refuted by Polygon’s co-founder, have undoubtedly cast a shadow of doubt over the network’s security posture. For users and investors, such debates highlight the importance of thorough due diligence, understanding the underlying governance mechanisms, and assessing the associated risks of any blockchain platform.
The fact that Polygon is actively engaged in discussions about evolving its multisig strategy and working towards greater decentralization is a positive sign. The commitment to gradually transitioning control to the community, as outlined in their transparency reports and acknowledged by Bjelic, suggests a long-term vision aligned with the core principles of decentralized technologies.
However, the speed and manner of this transition will be crucial. The cryptocurrency market is dynamic and often unforgiving, with security breaches and exploits having severe consequences. Polygon’s ability to navigate these challenges, address community concerns transparently, and ultimately deliver on its promises of enhanced decentralization and security will be paramount to maintaining trust and solidifying its position as a leading Ethereum scaling solution. The ongoing dialogue, even when critical, serves as a vital mechanism for accountability and drives the continuous improvement necessary for the maturation of the entire blockchain ecosystem.
