Polygon Discloses Previously Unreported Security Vulnerabilities Fixed via Austin and Kyoto Hard Forks

Chainthink

Release Time: 08/30/2026 01:43:41

MATIC

----

Summary

Polygon recently disclosed multiple smart contract vulnerabilities that were resolved through the Austin and Kyoto hard forks, as reported by Chainthink. The issues affected Bor and Heimdall clients, introducing risks such as denial-of-service attacks, validator resource exhaustion, and disruptions in checkpoint and milestone processing. A critical flaw in Heimdall allowed malicious transactions to overload validators, while the Austin fork addressed two security vulnerabilities in Bor. Polygon confirmed no exploits occurred on mainnet and stated that the fixes were privately tested prior to deployment. Earlier this month, Polygon Labs warned node operators to upgrade following the forks, as outdated clients risked falling out of sync with the network.

ChainThink news: On August 30, according to an official forum announcement, Polygon disclosed multiple previously unreported security vulnerabilities recently patched via the Austin and Kyoto hard forks.

These vulnerabilities affect Polygon's Bor and Heimdall clients, including risks of denial of service, validator resource exhaustion, and flaws impacting checkpoint and milestone processing.

The most serious issue involves Heimdall: meticulously crafted transactions could force validators to perform excessive processing work, disrupting the network.

The Austin hard fork also fixed two denial-of-service vulnerabilities in Bor that could slow down block processing or cause nodes to crash.

Polygon stated that these vulnerabilities were not exploited on the mainnet, and the fixes were privately tested before deployment to the mainnet and public disclosure.

Previously, Polygon Labs issued an emergency notice requiring node operators to upgrade their clients after the hard fork; nodes still running the pre-fork version have diverged from the canonical consensus.

Source:Show original

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.