
Polkadot Whitelisted Caller Referendum 1782, now passed, urgently deployed Runtime 2.0.1 to patch a security vulnerability discovered shortly after the Asset Hub Migration.
The issue, described in Kian Paimani’s (Parity) post-mortem, was a coding error in the “election-provider-multi-block pallet” that bypassed an origin check, letting any user execute a specific governance-only function.


