This is solved by requiring consensus before validating transactions. A bogus node can get lucky and, at great expenses, validate a double spend but it would be caught and rejected with the next block. That is why transactions aren't generally considered durable until six confirmations. At that point, it is infinitesimally unlikely that a bad actor would have been able to validate six blocks in a row.