roblem: Only flag submission endpoint has rate limits. Missing on: login (brute-force), team creation (spam), leaderboard queries (enumeration), hint reveals (griefing).
Proposed Solution: Per-endpoint rate limiting (centralized middleware), graduated penalties (warning → temp block → ban), logging and monitoring.
roblem: Only flag submission endpoint has rate limits. Missing on: login (brute-force), team creation (spam), leaderboard queries (enumeration), hint reveals (griefing).
Proposed Solution: Per-endpoint rate limiting (centralized middleware), graduated penalties (warning → temp block → ban), logging and monitoring.