Polygon deployed Austin and Kyoto hard forks to patch denial-of-service and consensus vulnerabilities in Bor and Heimdall clients before public disclosure.
Tech & Launches ·
Polygon Labs disclosed that it deployed two hard forks to remedy security vulnerabilities in its proof-of-stake infrastructure before making the issues public. The Austin upgrade on the Bor client and Kyoto upgrade on the Heimdall client were activated on mainnet following validation on testnet, then announced after the network had been secured. The team stated none of these flaws saw active exploitation on the live network.
The Austin fork eliminated two separate denial-of-service mechanisms tied to block processing, notably a vector where a malicious block producer could render peer nodes inoperative by inserting an oversized data element into a block. Kyoto addressed a more critical consensus issue: a vulnerability that would have permitted an attacker to trigger expensive, synchronized validation work across the entire validator set through a single low-cost malformed transaction. Both upgrades are now mandatory for node operators and have already gone live without requiring any state migration or node resynchronization.
The disclosures emerged during a transitional period for Polygon, which recently completed its migration from the legacy MATIC token to POL. As of Sunday, POL traded near $0.09983, down 2.3% in a single day and 6.8% across the week, leaving the asset with a market cap near $1.07 billion despite recent monthly gains.