Crypto28 August, 20262 min read
Polygon Fixes Security Vulnerabilities In Austin And Kyoto Hard Forks, Says No Mainnet Exploitation
This article is an automated aggregation of coverage from news outlets. Our editorials offer in-depth analysis curated by the NewsCord team.
Polygon fixed multiple PoS security vulnerabilities via Austin and Kyoto hard forks. Vulnerabilities included DoS risks and validator processing bottlenecks; patched before disclosure.
9 outlets told this the same way.
Hard forks patch flaws
Polygon disclosed that it fixed multiple security vulnerabilities on its proof-of-stake network through the Austin and Kyoto hard forks, saying it found no cases of exploitation on the mainnet. The disclosure described issues affecting the Bor and Heimdall clients, including denial-of-service risks, validator resource exhaustion, and errors in checkpoint and milestone processing. Polygon said the most severe vulnerability was in the Heimdall client, where a specially crafted transaction could impose excessive computational load on validators and disrupt network operations.
For the Bor client, Polygon said the Austin hard fork resolved two denial-of-service vulnerabilities that could have slowed block processing or forced nodes to shut down. Polygon also said PoS nodes must upgrade to Bor v2.10.0 and validators and full nodes must move to Heimdall v0.11.0, with both versions active on the mainnet.
Upgrade notice and impact
Polygon’s Validators Support Team said nodes running older client versions after hard fork activation heights would fall out of consensus and must upgrade to rejoin the canonical network.
CryptoRank reported that Bor must be v2.10.0 or later following Austin at mainnet block 91,949,700, and that Heimdall must be v0.11.0 or later after Kyoto activated at height 51,533,000 on Aug. 18 at 10:10:31 UTC.
Cointelegraph echoed that Polygon deployed the fixes through the Austin and Kyoto hard forks, which were deployed privately and tested before being activated on mainnet and publicly disclosed.
Cointelegraph also stated that none of the vulnerabilities were observed being exploited on mainnet, while Polygon characterized the fixes as proactive before details were made public.
The disclosure framed the Heimdall issue as a validator workload problem, saying a specially crafted transaction could force validators to perform excessive processing work, potentially disrupting the network.
Broader ecosystem stakes
Beyond Polygon’s own infrastructure, the same hard-fork upgrade requirements create operational stakes for anyone running Polygon PoS nodes, because the company said outdated software would no longer participate in normal consensus. KuCoin described the Heimdall flaw as one that could potentially disrupt network operation by pushing validators into an inefficient or overly burdensome processing path, and it said the issue was addressed through the Kyoto hard fork with corresponding updates rolled out before public disclosure. bloomingbit added that Polygon withheld details until the fixes were completed, then disclosed them after deployment, testing and mainnet activation were finished, while stating that no actual exploitation had been detected on the mainnet.
In parallel, Crypto Briefing reported that Aerodrome expanded trading to tokenized global equities on Base, with Nvidia, Apple, Meta, and Alphabet shares tradeable around the clock as tokenized assets. Crypto Briefing said Aerodrome hit $103 million in tokenized stock volume within days of the August 24 launch and that AERO jumped about 11% to roughly $0.53 on the news.