Polygon Bridge Rated 7.2/10 Risk as $2.96B TVL Faces Validator and Liquidity Threats

·1 views

A DeFi security analysis dated September 2026 assessed the Polygon Bridge, which holds approximately $2.96 billion in locked assets across Ethereum and Polygon, and assigned it a risk score of 7.2 out of 10. The report flagged validator centralisation as a key concern, with just seven of ten active validators controlling around 68% of voting power, raising the risk of collusion or key compromise. Analysts also warned that the bridge's fast-exit liquidity pool, worth roughly $210 million or 7% of total TVL, could be exhausted during a coordinated mass-withdrawal event, potentially locking users out for up to seven days. Additional vulnerabilities identified include a fee asymmetry between deposits and withdrawals that could be exploited for repeated fee-drain attacks, and message-proof latency averaging 12 minutes against a 5-minute target. Despite multiple smart-contract audits showing no critical flaws in the past year, the report concluded that operational and economic risks dominate the bridge's overall risk profile.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

ClickHouse Tiered Storage Cuts S3 Costs 71% While Keeping Query Speed Intact

Engineers running ClickHouse on AWS EC2 face steep storage bills, with 3 TB on gp3 EBS costing roughly $245 per month compared to about $67 on S3 at $0.023 per GB-month. ClickHouse's MergeTree engine stores data in immutable parts that can each reside on different storage backends, making native tiering possible without any application-level changes. A tiered storage policy keeps recent data on fast local EBS while automatically migrating older parts to S3 after a configurable period, such as 12 months, using TTL rules. A secondary trigger called move_factor pushes the oldest parts to S3 once local disk usage crosses roughly 80%, preventing hot storage from filling up. Crucially, existing SQL queries, drivers, and dashboards require no modification, as ClickHouse handles part location transparently at the storage layer.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer spends $20k and 40 billion tokens building open-source AI agent harness in Dart

A solo developer has spent approximately $20,000 across 40 billion AI tokens over three months to build >_Fa, an open-source agent harness written in Dart, with zero lines of code written by hand. The project was built using low-cost models such as Kimi K3 and GLM-5.3, routed per task to keep costs down. The resulting tool is a roughly 7 MB single binary that requires no runtime, installs in under a second, and runs across multiple platforms including mobile, web, CLI, and CI pipelines. Notably, the harness is self-building — an automated factory shipped five releases in a single day without any human involvement. The app has now received Apple App Store approval, making it possible to build mobile apps directly from a mobile device.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Browser vs. Node.js Event Loop: Key Differences Every JS Developer Should Know

JavaScript is single-threaded but handles high concurrency through the Event Loop, which delegates heavy tasks like I/O and timers to system threads while queuing callbacks for the main thread. Both browsers and Node.js use this mechanism, but their implementations differ significantly in structure and optimization. The browser Event Loop includes a rendering phase targeting ~60Hz frame updates, where microtask bloat can freeze the UI, and requestAnimationFrame is preferred for visual updates. Node.js splits its macrotask queue into distinct phases — Timers, Poll, and Check — and adds process.nextTick(), which executes before standard Promise microtasks and can starve the Event Loop if called recursively. Understanding these differences is critical for writing performant, non-blocking JavaScript in both environments.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

CSS Grid Layout: How grid-template-areas and grid-area Work Together

CSS offers powerful grid properties that simplify webpage layout design. The grid-template-areas property allows developers to define named sections within a grid container. Child elements can then be assigned to these named sections using the grid-area property. For example, setting grid-area: header on a child element places it within the section named 'header' in the parent grid. Together, these two properties make it easier to build structured, readable layouts without complex positioning logic.

0 comments Read more at DEV Community