Polygon disclosed security and liveness flaws in its Bor and Heimdall clients after Austin and Kyoto hard forks patched them; the project says no mainnet exploitation or fund loss was observed.