Summary

  • Polygon Labs announced it has resolved multiple security issues via two hard forks—Austin on the Bor client and Kyoto on the Heimdall client—implemented privately and tested on the testnet prior to public announcement.
  • The updates mitigated denial-of-service vulnerabilities in block processing and a critical issue that could have compelled extensive and costly efforts from the entire validator set through a single malicious transaction.
  • As of Sunday, Polygon’s native token, POL, was priced at approximately $0.09983, reflecting a decrease of 2.3% for the day and a 6.8% drop over the week.

Polygon Labs has disclosed that it successfully patched a series of security vulnerabilities within its proof-of-stake network through two hard forks that were quietly deployed before being revealed to the public.

In a post on their forum published on Wednesday, the team outlined the fixes included in the Austin hard fork for the Bor client and the Kyoto hard fork for the Heimdall client. These updates were rolled out following what Polygon described as standard protocol for consensus-related fixes: implementing them discreetly and validating them on the Amoy testnet before activation on the mainnet, and then making a public announcement once the network's safety was assured.

Myriad: What's next for Ethereum's price? Share your prediction.

The Austin hard fork addressed two denial-of-service vulnerabilities in block processing, including one scenario where a malicious block producer could crash peer nodes by creating a block with an excessively large data field.

The Kyoto hard fork tackled a broader range of consensus-related issues, notably a serious flaw that would have allowed an attacker to compel significant, coordinated work across the entire validator set with a single, cost-effective crafted transaction that would be costly for the network to process.

Polygon emphasized that none of the vulnerabilities had been exploited on the mainnet and that all were addressed proactively. The upgrades are now mandatory for node operators and have already been implemented, requiring no state migrations or resynchronizations.

This announcement comes at a crucial time for Polygon, following the completion of the migration of its legacy MATIC token to POL, part of a larger redesign of its network structure.

Despite the updates, the price of POL saw little improvement, trading around $0.09983 on Sunday, down 2.3% over the previous 24 hours, according to CoinGecko. Over the past week, the token has decreased approximately 6.8% and has fallen around 60.8% over the past year, leaving it with a market capitalization near $1.07 billion, even after some gains in recent weeks.

Daily Debrief Newsletter

Stay updated with the latest news stories, along with original features, podcasts, videos, and more.