Think about validating signatures for IPFS submissions

[deweller]

Our backend service does not validate the address submitting data to IPFS. I think this is ok because the smart contract has the valid cid and that requires a signature.

We should double check there is no attack vector here.