Polygon (Organization): news timeline & CVEs

Verifiable Randomness for Blockchain-Based Lottery Systems

A Polygon smart-contract design mitigates the last-revealer attack in commit-and-reveal on-chain lotteries.

The paper surveys blockchain random-number generation and proposes a platform that extends commit-and-reveal while addressing the last-revealer attack, in which the final participant withholds a reveal to bias or abort the result. The design combines a web front-end with a Solidity smart contract on Polygon 2.0 and was implemented and tested on the Amoy testnet. The authors compare it with earlier approaches, evaluate its entropy, and describe the prototype as low-cost and simple to deploy.

arXiv cs.CRSep 25, 16:27 UTC · 13d agoResearch

EtherHiding Malware Abuses Polygon Blockchain to Hide C2 and Steal Banking Credentials

EtherHiding malware uses Polygon blockchain smart contracts for resilient C2 and steals banking credentials from nearly 500 targeted domains.

The EtherHiding campaign leverages Polygon blockchain smart contracts to host resilient command-and-control infrastructure, allowing attackers to rotate C2 domains without modifying the deployed payload. Active since late 2025, the operation has compromised over 30 legitimate websites, using FakeCaptcha overlays to trick users into executing a PowerShell dropper. The malware evolves from a general backdoor to a banking trojan targeting approximately 479 financial and cryptocurrency domains, using the blockchain to obfuscate C2 addresses and evade traditional takedown methods.

GBHackersSep 21, 05:51 UTC · 17d agoMalware in the wild

Polygon

Timeline2 articles

Appears with

Verifiable Randomness for Blockchain-Based Lottery Systems

EtherHiding Malware Abuses Polygon Blockchain to Hide C2 and Steal Banking Credentials