What is a Sybil attack?
In a Sybil attack, one person creates many fake identities to gain influence a single user should not have. In web3, that means farming airdrops and rewards, manipulating governance votes, gaming reputation systems and overwhelming networks. Anything that gives value per address, rather than per person or per unit of stake, invites it.
Where they show up
- Airdrops and incentives. Thousands of wallets claiming rewards meant for individual users.
- Governance. Systems that count one vote per address, or quorum rules that fake participation can satisfy.
- Reputation and allowlists. Fake accounts building up status or slots.
- Networks. Many fake nodes used to isolate or mislead honest ones.
Making them harder
- Weight influence by stake or cost, not address count.
- Use snapshots and minimum holding periods.
- Analyse funding patterns to link addresses that share a source.
- Where appropriate, require proof of personhood or verified identity.
Questions
Frequently asked questions
Can Sybil attacks be stopped completely?
Not on open networks, where creating addresses is free. They can be made unprofitable by tying influence to stake, cost or verified identity instead of address count.
Published Updated