Niome patches S3 URL exploit, bans cheaters

The team identified and blocked multiple cheating vectors, including validator impersonation, machine disruption attacks, and a critical S3 presigned URL vulnerability that allowed reuse of expired credentials to access ground truth. All security credentials have been rotated. Upcoming changes include publishing full miner responses and ground truths, removing response-time weighting from scores, and clarifying task specifications.

• •S3 presigned URL expiration (1 day) allowed reuse across 8-hour validation cycles
• •Attackers impersonated validators, stole responses, and overloaded miners with bulk requests
• •Full miner responses and ground truths will be published for transparency
• •Response-time limit introduced; response-time weighting removed from scoring