The proposal aims to upgrade Polkadot's runtime to [v9281](https://github.com/paritytech/polkadot/releases/tag/v0.9.28) after an [issue was identified](https://forum.polkadot.network/t/security-vulnerability-executing-unauthorized-xcm-messages/553) on the last release presenting the possibility of adding inherents containing fake data to a block. This release fixes the vulnerabilities and includes: 

**Runtime**

✅ audited #11918 Low - Make new storage layer truly default

✅ trivial #11690 Low - Add event to pallet asset-tx-payment

✅ audited #11796 Low - Auto-incremental collectionid

✅ trivial #11985 Low - Pallet-contracts: fix 16bit func_id

✅ trivial #11991 Low - Contracts: apply depth limit when decoding

⏳ pending non-critical audit #11819 ❗️ Medium - Transaction payment runtime api: query call info and fee details

✅ audited #11927 Low - Transactional: wrap pallet::calls directly in storage layers

✅ trivial #5582 Low - Add nomination pools to polkadot runtime

✅ trivial #5910 Low - Update weights

It also includes the fix to a vulnerability which potentially impacts block authoring. If passed by the Council, this proposal should be voted by the community for final decision and enacted after. Make sure to vote at your convenience! Release notes, runtime changes and proposal hash can be found [HERE](https://github.com/paritytech/polkadot/releases/tag/v0.9.28). 

Proposal hash: `0xe9a09ca478bb39406f131a5fd4dab46edbf75d9ae3a9950eb0a74094943be4be`

- Polkadot's runtime is being upgraded to fix vulnerabilities.
- The upgrade includes several changes and fixes to improve the system.
- There was a security issue in the previous release that allowed fake data to be added to a block.
- The proposal needs to be voted on by the Council and the community.
- You can find more information and vote at the provided links.

#265 Runtime v9281 Upgrade On Polkadot

No Active Proposals