[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 13 sources · 3 days · First seen · Last updated

Polygon Labs PoS network security patches

Overview

Polygon Labs addressed security vulnerabilities within its Proof-of-Stake (PoS) network by deploying two coordinated hard forks, named Austin and Kyoto.

The Austin hard fork upgraded the Bor execution client to prevent denial-of-service attacks. It implemented a per-block gas limit on state-sync events and removed an oversized data field in TxDependency that could have caused peer nodes to crash.

The Kyoto hard fork targeted the Heimdall client to harden consensus. It addressed a vulnerability involving nested protobuf fields that allowed an attacker to create low-cost transactions requiring excessive computational work from the validator set. Polygon described this flaw as “a permissionless way to force costly, correlated work across the whole validator set.” The fix utilizes a byte-level pre-scan to reject transactions exceeding nesting thresholds.

Polygon Labs stated there was no evidence these vulnerabilities were exploited on the mainnet. Both upgrades are mandatory for node operators to remain on the canonical consensus chain.

Entities

Polygon Labs · Pol · Polygon · Heimdall · Bor

Timeline

  1. 16 days ago

    [TECHNOLOGY] 2 sources
    Polygon Labs releases hard forks to fix network security flaws

    Polygon Labs released the Kyoto and Austin hard forks to fix security vulnerabilities in its POS network, including a protobuf nesting flaw and denial-of-service risks in its execution client.

  2. 18 days ago

    [TECHNOLOGY] 12 sources
    Polygon Labs patches PoS network vulnerabilities via hard forks

    Polygon Labs patched security vulnerabilities in its PoS network via the Austin and Kyoto hard forks, addressing denial-of-service risks and consensus flaws before public disclosure.

Sources

bitcoinethereumnews.com · blockchainseoul.kr · blog.coincodecap.com · cointrust.com · crypto-news-flash.com · crypto.news · cryptopolitan.com · cryptosnewss.com · phocapblockchain.net · planningassociates.com.au · siamblockchain.com · techxeber.az · tokenpost.kr