The proposal aims to upgrade Polkadot's runtime to [v9281](https://github.com/paritytech/polkadot/releases/tag/v0.9.28) after an [issue was identified](https://forum.polkadot.network/t/security-vulnerability-executing-unauthorized-xcm-messages/553) on the last release presenting the possibility of adding inherents containing fake data to a block. This release fixes the vulnerabilities and includes: 

**Runtime**

✅ audited #11918 Low - Make new storage layer truly default

✅ trivial #11690 Low - Add event to pallet asset-tx-payment

✅ audited #11796 Low - Auto-incremental collectionid

✅ trivial #11985 Low - Pallet-contracts: fix 16bit func_id

✅ trivial #11991 Low - Contracts: apply depth limit when decoding

⏳ pending non-critical audit #11819 ❗️ Medium - Transaction payment runtime api: query call info and fee details

✅ audited #11927 Low - Transactional: wrap pallet::calls directly in storage layers

✅ trivial #5582 Low - Add nomination pools to polkadot runtime

✅ trivial #5910 Low - Update weights

It also includes the fix to a vulnerability which potentially impacts block authoring. If passed by the Council, this proposal should be voted by the community for final decision and enacted after. Make sure to vote at your convenience! Release notes, runtime changes and proposal hash can be found [HERE](https://github.com/paritytech/polkadot/releases/tag/v0.9.28). 

Proposal hash: `0xe9a09ca478bb39406f131a5fd4dab46edbf75d9ae3a9950eb0a74094943be4be`

- Polkadot's runtime is being upgraded to fix vulnerabilities and add new features.
- The upgrade includes changes to the storage layer, contracts, transaction payment, and nomination pools.
- There was a security issue in the previous release that allowed fake data to be added to a block.
- The proposal needs to be voted on by the community before it can be enacted.
- You can find more information and vote on the proposal at the provided links.

#57 Runtime v9281 Upgrade On Polkadot

No Active Proposals