Polygon fixed several previously private vulnerabilities through the Austin and Kyoto hard forks before publicly disclosing them. The flaws affected the Bor and Heimdall clients and included denial-of-service risks, validator resource exhaustion, and checkpoint and milestone processing issues. Polygon said it observed no exploitation of the vulnerabilities on mainnet.