BTC $81,565.49 -0.95%
ETH $2,410.98 -2.06%
BNB $721.31 -1.38%
XRP $1.30 -2.82%
SOL $103.72 -2.07%
TRX $0.3347 +0.69%
DOGE $0.0801 -1.77%
ADA $0.2244 -2.86%
BCH $274.77 -1.59%
LINK $12.30 -1.91%
HYPE $79.59 -3.19%
AAVE $155.81 -0.72%
SUI $1.01 -1.47%
XLM $0.1799 -2.57%
ZEC $1,146.45 -7.50%
AAPL $343.73 +0.42%
AMZN $250.21 -1.92%
GOOGL $341.43 -2.35%
MSFT $528.27 -1.90%
META $711.42 -3.19%
NVDA $214.60 -1.55%
TSLA $354.01 -2.37%
SNDK $1,301.99 -6.47%
INTC $90.13 -6.07%
SPCX $146.44 -1.88%
MU $881.29 -5.44%
AMD $530.79 -5.66%
BTC $81,565.49 -0.95%
ETH $2,410.98 -2.06%
BNB $721.31 -1.38%
XRP $1.30 -2.82%
SOL $103.72 -2.07%
TRX $0.3347 +0.69%
DOGE $0.0801 -1.77%
ADA $0.2244 -2.86%
BCH $274.77 -1.59%
LINK $12.30 -1.91%
HYPE $79.59 -3.19%
AAVE $155.81 -0.72%
SUI $1.01 -1.47%
XLM $0.1799 -2.57%
ZEC $1,146.45 -7.50%
AAPL $343.73 +0.42%
AMZN $250.21 -1.92%
GOOGL $341.43 -2.35%
MSFT $528.27 -1.90%
META $711.42 -3.19%
NVDA $214.60 -1.55%
TSLA $354.01 -2.37%
SNDK $1,301.99 -6.47%
INTC $90.13 -6.07%
SPCX $146.44 -1.88%
MU $881.29 -5.44%
AMD $530.79 -5.66%

poly

All
Article
Flash

Polygon Labs: Bor v2.1.3 released, fixing two DoS security vulnerabilities

Polygon Labs official announcement, Bor v2.1.3 is officially released to the public, previously distributed in private version form to validators and major infrastructure providers. This update fixes two medium-severity denial-of-service vulnerabilities in BlockSTM V2 parallel block execution, both submitted by security researchers through the Immunefi bug bounty program.Unbounded keccak256 cache issue: Attackers can fill hundreds of MiB of cache during the speculative execution phase by constructing specific transactions, leading to node memory exhaustion and delayed block production. The fix is to set a capacity limit on the shared cache. Repeated code hash calculation issue in parallel execution: A single transaction can cause the parallel processor to take about 11 seconds, severely affecting node activity. The fix is to cache code hash results on a per-transaction basis.In addition, this update also includes several internal hardening measures: the transaction pool address filtering adds interception for EIP-7702 SetCode authorization, RPC batch execution pool concurrency limit fixes, consistency fixes for reading balances across self-destruct boundaries in parallel execution, and an automatic cleanup mechanism for pending transactions (default 3 hours). The affected versions are Bor v2.1.1 and v2.1.2. v2.1.3 is a non-hard fork, and nodes can upgrade individually without coordination. No exploitation records of the two vulnerabilities have been found on the mainnet and testnet Amoy.

first_img StarkWare launched OffMarket, allowing Polymarket users to trade privately

According to The Block, Starknet developer StarkWare has officially opened its privacy trading service OffMarket to the public, allowing users to trade on Polymarket without publicly associating their positions with their accounts.The service has been undergoing limited testing since August, operating based on Starknet's zero-knowledge technology and shared privacy pool. Currently, the USDC deposit limit for each account is set at $1,000, and StarkWare has stated that it will adjust this limit based on demand and usage. Orders are still executed on Polymarket, facing the same buyers and sellers and market prices.OffMarket is completely non-custodial, with users' private keys stored in the browser, and funds held in Starknet's open-source privacy pool. Polymarket positions are held in contracts by wallets derived from user signatures. OpenZeppelin completed an audit of the privacy pool contract in June, finding no serious or high-risk issues, and StarkWare completed formal verification the following month. StarkWare co-founder and CEO Eli Ben-Sasson stated that the project stems from his long-term investment in the field of financial privacy and mentioned that OffMarket is bringing zero-knowledge technology to Polymarket.A spokesperson for StarkWare stated that OffMarket still cannot prevent others from identifying traders through transaction size or timing, and the market, prices, and transactions themselves remain public. Transfers of USDC from the shared pool to new wallets can also be seen.

Polymarket CEO: Chasing hundredfold tokens is a game of "irrational exuberance."

Polymarket's CEO Shayne Coplan stated during a fireside chat at the Token2049 conference in Singapore that cryptocurrency trading is evolving into a game of "irrational exuberance," where traders compete to be the first to find the next hundredfold token. He pointed out that people think they are buying something valuable, but in reality, it is worthless; however, as long as there is a possibility of it rising to 100 times, they want to sell before it goes to zero. Coplan mentioned that some traders can gain considerable wealth through this strategy, but it is essentially a game of "irrational exuberance and hot potato," where rising asset prices will eventually fall back.Coplan indicated that the continuous growth of Polymarket's user base shows that some traders are looking for betting opportunities with more predictable odds, rather than the next skyrocketing cryptocurrency. He explained that trading these markets on Polymarket does not have exponential upside potential, but informed traders will continue to place bets on future events with more predictable odds. According to data from DefiLlama, Polymarket is the second-largest prediction market, with a trading volume of $1.21 billion in the past seven days, while the largest market, Kalshi, had $2.3 billion.The growth of prediction markets has also attracted more attention from U.S. regulators. It was reported that JPMorgan terminated its banking relationship with Polymarket on August 14 due to regulatory concerns but expressed interest in acting as an underwriter if Polymarket seeks to go public.
app_icon
ChainCatcher Building the Web3 world with innovations.