AuditFL: A Contract-Backed Clearing Layer for Open Federated Learning
Organizations: Department of Computer Science and Engineering Hong Kong University of Science and Technology Hong Kong SAR, China · Department of Electrical and Computer Engineering University of Thessaly Volos, Greece
Abstract
Federated learning (FL) keeps raw data local, but most deployments still rely on a trusted coordinator for client admission, checkpoint distribution, update collection, aggregation, and rewards. This paper presents AuditFL, a contract-backed clearing layer for auditable FL in open settings. AuditFL keeps training and aggregation off chain, stores model artifacts in an assumed reliable off-chain artifact store, and records only content identifiers and economic state on chain. Clients reserve update tickets with deposits, publish update identifiers, and later claim refunds or rewards; the task coordinator publishes global checkpoints and finalizes rounds through deterministic settlement rules. The design does not remove the aggregator, but makes its on-chain round decisions attributable, replayable, auditable, and economically constrained. We implement AuditFL as both a deterministic state-machine prototype and a Solidity contract on a local Ethereum-compatible Anvil chain. On full MNIST with Dirichlet non-IID splits, 12 rounds, and up to 200 clients, AuditFL preserves the Plain FL learning trajectory while its overhead follows closed-form control-plane models. At 200 clients, the contract run issues 5,026 transactions, stores 2,413 off-chain artifacts (144.9 MiB), and consumes 829.7M EVM gas, dominated by per-client reserve and publish calls. Controlled dropout, invalid-update, and artifact-unavailability stress tests reduce inclusion nearly linearly but still finalize rounds, with final-accuracy changes remaining within a few tenths of an accuracy percentage point even under high injected failure rates.
Figures & tables
| Work | Open | Commit. | Partic. | Econ. | Contract | Fault/ | Main emphasis |
| admit. | refs.* | bond | settle. | cost | attack focus | ||
| BlockFL [ 8 ] | – | – | – | – | – | block-generation latency | |
| Biscotti [ 10 ] | – | – | – | private/secure P2P FL | |||
| FedCoin [ 15 ] | – | – | – | – | Shapley-based payments | ||
| ChainFL [ 16 ] | – | – | – | – | – | on-chain model storage/aggregation | |
| BlockFLA [ 17 ] | – | backdoor accountability |
| Object | Main effect and checks |
|---|---|
| ListingTx | Creates a task with model identifier, initial content identifier, deadlines, deposits, and immutable rules. |
| FundingTx | Adds tokens to the reward pool after signer, balance, and amount checks. |
| UpdateIntentTx | Reserves a ticket, locks a deposit, and enforces per-account caps. |
| UpdatePublishTx | Binds a live unrevealed ticket to an update content identifier. |
| GlobalUpdateTx | Finalizes the round with global identifier, included tickets, refunds, and scores; advances the round and credits entitlements. |
| ClaimTx | Debits an entitlement and credits the claimant balance. |
Federated Learning
Federated learning trains shared models across data holders without requiring them to pool their raw data.
See all 992 papers