What are the main risks of using Polygon?
Polygon's main risks are bridge exploits, app bugs and a small validator set. Bridging from Ethereum adds custody and contract risk and staking delays.

On this page
Polygon is a group of blockchains that make Ethereum transactions cheaper, and POL is the token that pays fees and helps secure the largest of them. Using Polygon means trusting apps, bridges and validators, and each adds a different kind of risk.
What are the main risks?
Polygon's largest chain relies on bridges, apps and a small group of validators. Bridge exploits happen when a flaw lets someone drain the assets the bridge holds, and smart contract bugs in an app or token can move your funds.
- Bridge exploits: a flaw can drain the assets a bridge holds.
- Smart contract bugs: a flawed app can move your funds.
- Custody: assets you bridge from Ethereum sit in a contract you do not control.
- Validators and staking: a small group produces blocks, downtime can jail a validator, and unstaking takes time.
How does Polygon secure transactions?
The main Polygon chain runs on proof of stake. Validators stake POL, take turns producing blocks and post checkpoints to Ethereum. A checkpoint records the chain's state in an Ethereum contract, so rewriting history would mean attacking Ethereum too.
What did the MATIC-to-POL change?
MATIC was Polygon's original token. In September 2024, Polygon began replacing MATIC with POL, and holders could swap one for one. POL pays gas and secures the main chain. Staking moved to new staking contracts, and the token contract address changed from MATIC to POL, so older guides can point you to the wrong address.
What legal issues has Polygon faced?
In June 2023, the SEC named MATIC as an unregistered security in its lawsuit against Coinbase. Polygon was not a defendant, and the company denied the label.
Frequently asked questions
Polygon is a network of chains. The proof-of-stake chain is the largest, and other chains have their own risks.
No. An exchange can send POL or other tokens straight to a Polygon address.
The bridge is usually paused, and assets taken in an exploit are usually not recovered.
Yes. Staking is optional, so you can use apps and pay gas without it.






