Polygon Discloses Security Flaws Fixed in Recent Hard Forks

Polygon has revealed several previously private security vulnerabilities that could have compromised its proof-of-stake network. The issues, which affected Polygon's Bor and Heimdall clients, included denial-of-service risks and flaws affecting checkpoint and milestone processing.

The most severe issue was in Heimdall, where a specially crafted transaction could force validators to perform excessive processing work, potentially disrupting the network.

Polygon said the vulnerabilities were fixed through two recent hard forks: Austin and Kyoto. The fixes were deployed privately and tested before being activated on mainnet and publicly disclosed.