[P0] Security: Training #340

Closed @tcharchian opened 2025-09-04 21:20 UTC 0 comments Updated 2025-10-15 00:31 UTC
  • GOI-14 | Permissionless Training Operations Enable DoS And Forged Completion
  • GOI-16 | Missing Access Control In Message Server Handlers
  • GOI-17 | Dropped Node Rank Updates Are Not Persisted After Rerank
  • GOI-02 | Missing Validation And Authorization In SubmitTrainingKvRecord Leads To Potential DoS
  • GOI-18 | Underflow In Block-Difference Check Disables Assignment Deadline
  • GOI-25 | Missing Dummy Training Task Creation Stateful Validation
  • GOI-26 | Missing Input Validation For SubmitHardwareDiff Leads To DoS
  • GOI-27 | Missing Validation For Participant Populated Fields In NewGlobalNodeId
  • GOI-28 | Missing Stateful Validation For Msg CreateTrainingTaks
  • GOI-30 | Complete Task Does Not Complete The Task
  • GOI-32 | Inconsistency Between Comment And Code In training_sync.go

🔄 Auto-synced from Issue #340 every hour.