BTC $81,784.42 -0.04%
ETH $2,384.26 -1.73%
BNB $725.78 -0.72%
XRP $1.32 -1.00%
SOL $104.00 +0.38%
TRX $0.3302 -0.72%
DOGE $0.0794 -2.89%
ADA $0.2258 -0.48%
BCH $271.80 +1.37%
LINK $12.24 -0.62%
HYPE $80.64 +1.32%
AAVE $152.27 -2.13%
SUI $0.9982 -0.99%
XLM $0.1820 -0.41%
ZEC $1,135.29 -1.46%
AAPL $344.92 -0.07%
AMZN $252.44 -1.63%
GOOGL $349.02 -1.73%
MSFT $537.12 -0.23%
META $731.83 -1.85%
NVDA $216.69 -3.39%
TSLA $360.98 -2.27%
SNDK $1,347.03 -6.05%
INTC $93.22 -7.40%
SPCX $146.69 -4.96%
MU $903.05 -3.92%
AMD $545.37 -6.87%
BTC $81,784.42 -0.04%
ETH $2,384.26 -1.73%
BNB $725.78 -0.72%
XRP $1.32 -1.00%
SOL $104.00 +0.38%
TRX $0.3302 -0.72%
DOGE $0.0794 -2.89%
ADA $0.2258 -0.48%
BCH $271.80 +1.37%
LINK $12.24 -0.62%
HYPE $80.64 +1.32%
AAVE $152.27 -2.13%
SUI $0.9982 -0.99%
XLM $0.1820 -0.41%
ZEC $1,135.29 -1.46%
AAPL $344.92 -0.07%
AMZN $252.44 -1.63%
GOOGL $349.02 -1.73%
MSFT $537.12 -0.23%
META $731.83 -1.85%
NVDA $216.69 -3.39%
TSLA $360.98 -2.27%
SNDK $1,347.03 -6.05%
INTC $93.22 -7.40%
SPCX $146.69 -4.96%
MU $903.05 -3.92%
AMD $545.37 -6.87%

ab

All
Article
Flash

Polygon Labs: Bor v2.1.3 released, fixing two DoS security vulnerabilities

Polygon Labs official announcement, Bor v2.1.3 is officially released to the public, previously distributed in private version form to validators and major infrastructure providers. This update fixes two medium-severity denial-of-service vulnerabilities in BlockSTM V2 parallel block execution, both submitted by security researchers through the Immunefi bug bounty program.Unbounded keccak256 cache issue: Attackers can fill hundreds of MiB of cache during the speculative execution phase by constructing specific transactions, leading to node memory exhaustion and delayed block production. The fix is to set a capacity limit on the shared cache. Repeated code hash calculation issue in parallel execution: A single transaction can cause the parallel processor to take about 11 seconds, severely affecting node activity. The fix is to cache code hash results on a per-transaction basis.In addition, this update also includes several internal hardening measures: the transaction pool address filtering adds interception for EIP-7702 SetCode authorization, RPC batch execution pool concurrency limit fixes, consistency fixes for reading balances across self-destruct boundaries in parallel execution, and an automatic cleanup mechanism for pending transactions (default 3 hours). The affected versions are Bor v2.1.1 and v2.1.2. v2.1.3 is a non-hard fork, and nodes can upgrade individually without coordination. No exploitation records of the two vulnerabilities have been found on the mainnet and testnet Amoy.

first_img a16z General Partner David Haber: Long-cycle intelligent agents can charge based on results

David Haber, a general partner at a16z, stated that long-cycle intelligent agents can now progress towards goals across dozens of steps and various interaction methods over weeks to months. He noted that AI previously handled short tasks with clear boundaries, where customer service was implemented earlier due to verifiable results and edge cases manageable by humans; now, intelligent agents can guide insurance clients from the initial call to payout, mortgage clients from pre-approval to closing, and business leads from demonstration to signing, gaining returns based on revenue growth rather than just cost savings.He used the example of plaintiff lawyers preparing cases, stating that the process resembles a relay race, where value can easily be lost at handoff points. Potential clients often contact multiple law firms simultaneously, and slow responses or evaluations can lead to loss; after signing, evidence collection is limited by manpower, and firms may not follow up with witnesses who did not answer the fifth call, making it difficult to review low-value cases item by item. Missing bills or unexplained treatment gaps can also lower settlement amounts. Long-cycle intelligent agents can assess in real-time around the clock, utilizing sub-agents to advance evidence collection and client updates via phone, email, or text, while maintaining complete records from call logs to medical records.Haber proposed three commercialization paths: selling platforms to existing teams, taking over outsourced services, or vertically integrating as a full-stack service provider, such as purchasing debt portfolios and completing collections. He mentioned that most states in the U.S. prohibit non-lawyers from sharing attorney fees, so the plaintiff legal scenario needs to align pricing with settlement amounts but cannot directly share profits.
app_icon
ChainCatcher Building the Web3 world with innovations.