Polygon Fixes Network Vulnerabilities Through Hard Forks

Polygon has implemented two hard forks to address security issues in its Proof of Stake network, involving Heimdall and Bor. All node operators are required to update their software to continue participating in consensus. The most severe vulnerability was found in Heimdall, allowing the creation of low-cost transactions that forced validators to expend computational power to decode. The hard fork Kyoto updates Heimdall to version 0.11.0 and rejects transactions when nested levels exceed limits, with this check being effective both when entering the memory pool and during the consensus path. The hard fork Austin focuses on the execution client Bor, fixing two denial-of-service paths related to state synchronization events and the TxDependency field. Polygon stated that these vulnerabilities were not exploited on the mainnet, and the fixes were completed before the activation of the hard forks. Austin was enabled at Bor block 91,949,700, while Kyoto was activated at Heimdall height 51,533,000. Each node requires Bor v2.10.0, and validators and full nodes need Heimdall 0.11.0, updated as a binary update without the need for state migration, genesis changes, or full resynchronization.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.