DCA ROLE — POLYMARKET PERPS COLLATERAL CONTRACT
Public-source check, 2026-10-30. Exact capture times are in the source wrappers.

Conclusion: Car's 50,000 pUSD movement is a deposit into Polymarket's Perps
collateral contract, naming his known signer as the account to credit. It is not
evidence of a direct payment to a private peer or an attacker-controlled wallet.
The deposit does not establish which later trades, internal transfers or
withdrawals occurred within the Perps account.

Transaction: https://polygonscan.com/tx/0x94fdfeb0cd13c7b994dfdb3c414d7adb23ae6ba3d4869b96a3adf095fb743c5a
Block 96,413,415; 2026-10-30 01:59:12 UTC; successful.
From Car proxy: 0x7c3db723f1d4d8cb9c550095203b686cb11e5c6b
Token: pUSD, 0xc011a7e12a19f7b1f670d46f03b03f3342e82dfb
Amount: 50,000.000000 pUSD
Deposit contract: 0xdca4af75705dbb50f62437045aff9921947917d2
Account credited (`to`): 0x1f64f2739a19fc5cdfd7c3f50c42463aa8983e82
The parallel chain audit independently recovered this signer from Car's legacy
batch signature at nonce 3910; see live/car-50k-legacy-authorization-recovered.json.

FIRST-PARTY ROLE AND PARAMETER DOCUMENTATION
https://github.com/Polymarket/contract-security/blob/main/README.md
The Perps deployment row lists this exact DCA address and publishes audit links.

https://docs.polymarket.com/perps/fund-your-account
The API instructions list this exact address as the Perps deposit contract and
the exact pUSD contract. They specify deposit(address token,uint256 amount,
address to), where `to` is the account signer. The approval then deposit sequence
documented there matches the two calls committed by Car's transaction signature.
The Data API's WITHDRAWAL classification describes the source prediction wallet
movement; the receiving contract operation is a Perps collateral deposit.

VERIFIED IMPLEMENTATION AT THE ACTUAL DEPOSIT BLOCK
https://sourcify.dev/server/v2/contract/137/0xf92018eecaf1585de6b6d4989f51482c3e90cce5?fields=all
Archive RPC at block 96,413,415 returns this implementation in DCA's EIP-1967
implementation slot. The implementation runtime from the same historical block
matches Sourcify's onchain runtime byte for byte. Sourcify reports exact creation
and runtime matches, ExchangeV1, verified 2026-07-28 21:31:36 UTC.
Preserved: implementation-at-car-deposit-proof.json, runtime-at-deposit-comparison.json,
implementation-sourcify-v2.json, implementation-verified-ABI.json,
source-ExchangeV1.sol.txt.

The implementation's _deposit routine transfers the received tokens from the
caller into this contract and emits Deposit(caller,token,received,to). It does not
immediately transfer the deposit to `to`. A later processWithdrawal requires an
authorized keeper, an account signature and a balance inclusion proof against a
committed state root, then emits WithdrawalCompleted with the payout destination.

WHAT THE PUBLIC CHAIN CANNOT ESTABLISH
https://docs.polymarket.com/perps/learn-about-trading/architecture
Official architecture documentation describes offchain matching, balances,
positions and funding, with Polygon custody and state-root commitments. The
funding documentation additionally describes internal account transfers that do
not generate an onchain transaction. Public DCA deposits/withdrawals can therefore
show contract inflows and payouts, but cannot reconstruct a person's complete
Perps trading, internal-transfer ledger or current withdrawable balance.

The contract's aggregate 74,959,668.165158 pUSD balance in the team's existing
pinned snapshot belongs to the pooled contract, not solely Car. Historical Car
deposits minus returns are also not a proven current Perps balance or profit:
trading, funding, fees and internal transfers may change the offchain account.
Private authenticated account access was neither requested nor attempted.

BOUNDED FETCH LIMITATIONS
The first-party registry's perpetuals-contract repository link returned 404;
PolygonScan/Polygon Blockscout source fetches returned 403. These do not establish
deletion or missing code. Sourcify V2 succeeded and its exact-match runtime was
independently compared with archive RPC at the deposit block.
