anybody-problem
anybody-problem copied to clipboard
Minor Security Issue
trafficstars
Current implementation technically makes it possible to "replay" from your last "save state" while submitting your proofs. This could be abused by playing well in first 500 steps then fucking up but just submitting the first chunk and then trying from that point onwards again. Kind of edge case that it would happen and would need to work pretty hard to purposefully exploit it.
Possible solution is commit reveal. Submit a merkle trie root containing all proofs in first submission then ensure subsequent submissions are included.
low risk, wont-fix for now