{"id":12596,"date":"2026-08-31T07:38:15","date_gmt":"2026-08-31T07:38:15","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=12596"},"modified":"2026-08-31T07:38:15","modified_gmt":"2026-08-31T07:38:15","slug":"polygon-quietly-patches-critical-security-flaws-in-pos-network","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=12596","title":{"rendered":"Polygon Quietly Patches Critical Security Flaws in PoS Network"},"content":{"rendered":"<p><\/p>\n<div>\n<div id=\"blockquote-block_ba7ba279da784fc83082572c9338de73\" class=\"blockquote-container\" style=\"border-color: #5100fc\">\n<div class=\"blockquote-text\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Polygon Labs said the Austin fork on the Bor client and the Kyoto fork on the Heimdall client fixed a batch of security and liveness flaws, including two denial-of-service paths in block processing.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The most severe flaw gave attackers a permissionless way to force costly, correlated decode work across the whole validator set with a single crafted transaction, according to the Aug. 27 disclosure.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Austin activated on mainnet Aug. 13 and Kyoto on Aug. 18, and Polygon said the flaws were addressed ahead of any exploitation on mainnet.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p class=\"wp-block-paragraph\">Polygon Labs revealed on Aug. 27 that two hard forks already active on its proof-of-stake network, Austin and Kyoto, had fixed a batch of security and liveness flaws, with details withheld until every fix was live on mainnet.<\/p>\n<p class=\"wp-block-paragraph\">Polygon\u2019s validator support team posted the disclosure to the project\u2019s governance forum, stating the fixes were rolled out privately, validated on the Amoy testnet before mainnet activation, and made public \u201conce the fleet was safe\u201d.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">Polygon characterised that sequence as standard practice for consensus-affecting fixes and stated the flaws were addressed ahead of any exploitation, with every fix validated before the forks activated.<\/p>\n<p class=\"wp-block-paragraph\">Austin shipped in version 2.10.0 of Bor, the network\u2019s execution client, and closed two denial-of-service paths in block processing. Bridge deposits arriving from Ethereum carried no per-block gas cap, so a block loaded with enough of them could temporarily stall the chain.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">A second field in block data, an unbounded parallel-execution hint called TxDependency, let a block producer crash peer nodes with an oversized entry, and Austin removed the field entirely.<\/p>\n<p class=\"wp-block-paragraph\"><strong>Read more: World Liberty\u2019s USD1 Stablecoin Goes Live on Canton for Institutional RWA Settlements<\/strong><\/p>\n<h2 id=\"h-validator-wide-attack-path-closed\" class=\"wp-block-heading\">Validator-Wide Attack Path Closed<\/h2>\n<p class=\"wp-block-paragraph\">Kyoto, delivered in version 0.11.0 of the Heimdall consensus client, bundled eight hardening fixes. Polygon ranked one above the rest: a single crafted transaction with deeply nested data fields could force every validator into heavy decode work at once, which the disclosure called \u201ca permissionless way to force costly, correlated work across the whole validator set\u201d, cheap for a sender to build and expensive for the network to process.<\/p>\n<p class=\"wp-block-paragraph\">Other Kyoto items fixed a signature-formatting flaw that could stall the anchoring of Polygon checkpoints to Ethereum, capped unbounded fee lists in transactions, and bound validator milestone votes to the exact parent block they attest to.<\/p>\n<p class=\"wp-block-paragraph\">Austin activated on mainnet at block 91,949,700 at 1:59 p.m. UTC on Aug. 13, and its public release notes appeared on GitHub about two hours later. Kyoto followed at Heimdall height 51,533,000 on Aug. 18, also ahead of its release notes, and the full forum write-up came nine days after that.<\/p>\n<p class=\"wp-block-paragraph\">Both upgrades are mandatory for node operators, and Polygon described them as plain binary upgrades with no state migration or resync required. Nodes still running older versions past the fork heights have already fallen out of consensus, the disclosure noted.<\/p>\n<p class=\"wp-block-paragraph\">The token replaced MATIC as the network\u2019s native asset under the Polygon 2.0 overhaul, and Polygon Labs signed agreements to buy payments firm Coinme and wallet developer Sequence for more than US$250 million (AU$348 million) as it expands into regulated payments.<\/p>\n<p class=\"wp-block-paragraph\"><strong>Read more: XRP Up 44% as Korean Bank Taps Ripple for Cross-Border Payments<\/strong><\/p>\n<\/p><\/div>\n<p>Polygon,Security#Polygon #Quietly #Patches #Critical #Security #Flaws #PoS #Network1788161895<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Polygon Labs said the Austin fork on the Bor client and the Kyoto fork on the Heimdall client fixed a batch of security and liveness flaws, including two denial-of-service paths in block processing. The most severe flaw gave attackers a permissionless way to force costly, correlated decode work across the whole validator set with a<\/p>\n","protected":false},"author":1,"featured_media":12597,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[158,6619,605,4426,1018,6620,393,1676],"class_list":["post-12596","post","type-post","status-publish","format-standard","has-post-thumbnail","category-bitcoin","tag-critical","tag-flaws","tag-network","tag-patches","tag-polygon","tag-pos","tag-quietly","tag-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Polygon Quietly Patches Critical Security Flaws in PoS Network - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=12596\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Polygon Quietly Patches Critical Security Flaws in PoS Network\" \/>\n<meta property=\"og:description\" content=\"Polygon Labs said the Austin fork on the Bor client and the Kyoto fork on the Heimdall client fixed a batch of security and liveness flaws, including two denial-of-service paths in block processing. The most severe flaw gave attackers a permissionless way to force costly, correlated decode work across the whole validator set with a\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=12596\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-31T07:38:15+00:00\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12596\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=12596\",\"name\":\"Polygon Quietly Patches Critical Security Flaws in PoS Network - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12596#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12596#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/AdobeStock_490918183.jpeg\",\"datePublished\":\"2026-08-31T07:38:15+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12596#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=12596\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12596#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/AdobeStock_490918183.jpeg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/AdobeStock_490918183.jpeg\",\"width\":1920,\"height\":960},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12596#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Polygon Quietly Patches Critical Security Flaws in PoS Network\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Polygon Quietly Patches Critical Security Flaws in PoS Network - Crypto News: Latest Cryptocurrency News and Analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=12596","og_locale":"en_US","og_type":"article","og_title":"Polygon Quietly Patches Critical Security Flaws in PoS Network","og_description":"Polygon Labs said the Austin fork on the Bor client and the Kyoto fork on the Heimdall client fixed a batch of security and liveness flaws, including two denial-of-service paths in block processing. The most severe flaw gave attackers a permissionless way to force costly, correlated decode work across the whole validator set with a","og_url":"https:\/\/cryptonews.uk.com\/?p=12596","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-08-31T07:38:15+00:00","author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=12596","url":"https:\/\/cryptonews.uk.com\/?p=12596","name":"Polygon Quietly Patches Critical Security Flaws in PoS Network - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=12596#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=12596#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/AdobeStock_490918183.jpeg","datePublished":"2026-08-31T07:38:15+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=12596#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=12596"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=12596#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/AdobeStock_490918183.jpeg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/AdobeStock_490918183.jpeg","width":1920,"height":960},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=12596#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Polygon Quietly Patches Critical Security Flaws in PoS Network"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/12596","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12596"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/12596\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/12597"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12596"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12596"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12596"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}