Polygon discloses security flaws fixed in recent hard forks
The vulnerabilities posed denial-of-service and validator resource risks but were patched before Polygon publicly disclosed them.
Polygon Labs has recently disclosed previously undisclosed security vulnerabilities that could have endangered its proof-of-stake network. These vulnerabilities were addressed through two recent hard forks, Austin and Kyoto, which were tested privately before being publicly disclosed. The most critical issue involved the Heimdall client, where a specially designed transaction could cause validators to expend excessive computational resources, potentially jeopardizing the network's stability.
Another set of vulnerabilities affected the Bor client, introducing denial-of-service risks that could have slowed block processing or caused nodes to crash. However, Polygon has emphasized that none of these exploits had been observed on mainnet as of their disclosure. The companies have proactively deployed these fixes before making the details public.
Nodes utilizing outdated versions of the Bor or Heimdall clients, post the hard fork activation heights, have been rendered out of consensus and must upgrade to rejoin the main network. The upgraded versions required are Bor v2.10.0 and Heimdall v0.11.0. Both of these upgrades are actively running on the mainnet. As of the time of the disclosure, Polygon's native token, POL (previously known as MATIC), was trading near $0.10.
It has seen a decrease of approximately 4% over the previous week but has risen by 44% over the past month and 2.3% year to date, according to CoinGecko.
Written by urgent.news from Cointelegraph's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
