Skip to content

Security/hardening: NetworkDuty fee bypass GasCap is 3_000_000_000 — free block-space DoS risk #1473

Closed @Aphelios01-sdk opened 2026-07-18 03:05 UTC 1 comment Updated 2026-07-18 03:08 UTC

Summary

NetworkDutyFeeBypassDecorator allows zero-fee transactions when all messages are “network duty” types, with GasCap: 3_000_000_000. That is far above documented ~100M batch sizes and enables large free block-space consumption.

Exempt types include PoC validation V2, Start/Finish inference, MsgValidation, invalidate/revalidate, and several BLS DKG messages (inference-chain/app/ante_fee.go).

Paths

  • inference-chain/app/ante.go — GasCap: 3_000_000_000
  • inference-chain/app/ante_fee.go — isExemptMessageType

Impact

Medium: mempool/block spam without paying min gas price by accounts that can sign duty messages (hosts / warm authz keys).

Suggested remediation

  1. Lower GasCap to a tight multiple of real DAPI batch limits
  2. Per-account rate limits on fee-exempt txs
  3. Revisit which messages truly need zero fees

💬 Comments (1)

@Aphelios01-sdk commented 2026-07-18 03:08 UTC

Closing to focus disclosure on the highest-priority finding: https://github.com/gonka-ai/gonka/issues/1470 (SSRF via InferenceUrl). Other items can be re-opened or filed via HackerOne if needed.

🔄 Auto-synced from Issue #1473 every hour.