Polygon Discloses PoS Client Bugs Affecting Bor and Heimdall
Polygon's Validators Support Team has disclosed a set of serious network bugs affecting Bor and Heimdall, two pieces of software that keep Polygon's proof-of-stake network running. The team tested and activated fixes privately first, giving validators a window to upgrade before any technical details went public.
The bugs lived in Bor and Heimdall, with one flaw in Heimdall being serious enough that a single crafted transaction could have forced validators to burn through an unusual amount of processing power. This kind of overload risks slowing the whole network down.
Polygon reported no evidence that anyone exploited these bugs on the live network. The team waited to go public with the disclosure, releasing it only after the hard forks had already activated. This narrowing of the gap attackers could exploit was a deliberate part of containing the risk.