Along with the bounty for this one: https://gerhard-wagner.medium.com/double-spending-bug-in-pol... (also $2M [1])

[1] https://portswigger.net/daily-swig/polygon-pays-out-record-2...