Polygon Releases Bor v2.10.3 to Fix Parallel Block Execution Vulnerabilities

Polygon Labs has released version Bor v2.10.3, which addresses two medium-severity denial-of-service vulnerabilities in the BlockSTM V2 parallel block execution, reported through the Immunefi bug bounty program. The new version also includes security and stability improvements such as transaction filtering, RPC execution concurrency limits, and pending transaction cleanup. The affected versions are Bor v2.10.1 and v2.10.2, which have BlockSTM V2 enabled by default. No exploitation of the vulnerabilities has been found on the mainnet or the Amoy testnet. This upgrade does not involve a hard fork, and nodes can upgrade gradually as needed.