Learn/Kamus (Glossary)/Sybil Attack: Why Airdrop Farmers Get Banned
CRYPTO GLOSSARY

Sybil Attack: Why Airdrop Farmers Get Banned

A Sybil attack is when one person creates hundreds of fake wallets to farm airdrops. Learn how protocols use on-chain analysis to detect and ban Sybil attackers.

Sybil Attack

A Sybil Attack in crypto occurs when a single individual generates hundreds or thousands of pseudonymous wallet addresses to interact with a protocol, artificially faking unique user metrics to farm Crypto Airdrops.

The term originates from computer science, named after the subject of the book Sybil, who was diagnosed with Dissociative Identity Disorder.

The Airdrop Arms Race

In the early days of DeFi (2020-2021), a protocol like Uniswap would drop $5,000 worth of UNI tokens to every single wallet that ever made a swap. Sybil attackers realized that if they wrote a script to make a $1 swap across 1,000 different wallets, they could extract $5,000,000 from the protocol.

Since then, an arms race has developed between Sybil farmers (who use sophisticated software to hide their footprint) and protocol developers (who hire data scientists to hunt them down).

How Protocols Catch Sybil Attackers

Protocols use on-chain clustering algorithms to find relationships between wallets. You will be flagged as a Sybil if you make these mistakes:

  1. The Funding Wallet Flag: If you fund 100 empty wallets directly from a single centralized exchange deposit address (like Binance), the protocol immediately knows all 100 wallets belong to the same person.
  2. The Time-Stamp Clustering: If 50 wallets execute the exact same sequence of transactions (Swap USDC -> Bridge to Arbitrum -> Mint NFT) within 5 seconds of each other every week, it is obviously a script.
  3. The Consolidation Dump: If an airdrop happens, and 50 different wallets immediately forward all their claimed tokens into one master wallet to sell them, they are retroactively flagged as Sybils for future drops.

To combat Sybil attacks, modern protocols now require Proof of Humanity (like Gitcoin Passports) or heavily weight airdrops toward the size of capital deposited, rather than the number of transactions made.

Related Terms

crypto-airdrop